Overview

overview

7

Static

static

7

227480edaa...18.exe

windows7-x64

7

227480edaa...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    227480edaaa028397ca198bfcdee0670_JaffaCakes118

  • Size

    726KB

  • Sample

    240703-qaah2sxamc

  • MD5

    227480edaaa028397ca198bfcdee0670

  • SHA1

    5faefd7e2bec31ff73725b720359e1c437e7529e

  • SHA256

    005ff3e5091adb953857eea24708ab9795ce1956ba1213754e2e08c25ac3d8b7

  • SHA512

    8d8d1e58e6ca1380199bf87d86fbddda8a84fc9248504620cdf13201fa46c4b8f94e72913c7343615cafde291934e6d0d25348ffbbaf68686941ddcb6cc581c3

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjfHANUTN9u:r5sJo6YrFUiyAak11LtjZu

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      227480edaaa028397ca198bfcdee0670_JaffaCakes118

    • Size

      726KB

    • MD5

      227480edaaa028397ca198bfcdee0670

    • SHA1

      5faefd7e2bec31ff73725b720359e1c437e7529e

    • SHA256

      005ff3e5091adb953857eea24708ab9795ce1956ba1213754e2e08c25ac3d8b7

    • SHA512

      8d8d1e58e6ca1380199bf87d86fbddda8a84fc9248504620cdf13201fa46c4b8f94e72913c7343615cafde291934e6d0d25348ffbbaf68686941ddcb6cc581c3

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjfHANUTN9u:r5sJo6YrFUiyAak11LtjZu

    Score
    7/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks