Overview

overview

7

Static

static

7

238fa0a3bb...18.exe

windows7-x64

7

238fa0a3bb...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    238fa0a3bb9d250352fdb0eec24c1575_JaffaCakes118

  • Size

    990KB

  • Sample

    240703-ymzmpsxaqh

  • MD5

    238fa0a3bb9d250352fdb0eec24c1575

  • SHA1

    b662cabeb6e6daee908067c9cc113bc4e69b3775

  • SHA256

    3eb856460514cf7183108ee23ef08d4f315e998b4aed0363535e2f68d2406dd1

  • SHA512

    ae1f3da725480659ac52471132386a95b7537a623632e07d7d26b07e35b460ccc01a1429455266dc8de9cc618a677060bd718ff98029d7bfe0907674965be437

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjK:r5sJo6YrFUiyAak11LtjK

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      238fa0a3bb9d250352fdb0eec24c1575_JaffaCakes118

    • Size

      990KB

    • MD5

      238fa0a3bb9d250352fdb0eec24c1575

    • SHA1

      b662cabeb6e6daee908067c9cc113bc4e69b3775

    • SHA256

      3eb856460514cf7183108ee23ef08d4f315e998b4aed0363535e2f68d2406dd1

    • SHA512

      ae1f3da725480659ac52471132386a95b7537a623632e07d7d26b07e35b460ccc01a1429455266dc8de9cc618a677060bd718ff98029d7bfe0907674965be437

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27QitjK:r5sJo6YrFUiyAak11LtjK

    Score
    7/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks