Overview

overview

7

Static

static

3

24a431ab02...18.exe

windows7-x64

7

24a431ab02...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    24a431ab02c85f099a3bf5e0b0c7fdbb_JaffaCakes118

  • Size

    104KB

  • Sample

    240704-e6nj1avcmn

  • MD5

    24a431ab02c85f099a3bf5e0b0c7fdbb

  • SHA1

    5ef3ccbdf14091318bfa59766d41280d6c778300

  • SHA256

    52ee268837cf08ff9002dd5bf4a09d50789bb255f0af15d1524973bc72444a58

  • SHA512

    aa06faa9369ec0eac8e2f19e25980640e424ebf28d6305bad29a464b74c51ff11329a692b9fe825261e2149865652601e370656288c14bd1787ff81556c8a72e

  • SSDEEP

    1536:VWYGZwOzVS5DF90Zpy24iKK4NFkmvhEhE6R/lbn9Wqzz:AfSApy24iKK4NSmKE6R/lb9Wq

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      24a431ab02c85f099a3bf5e0b0c7fdbb_JaffaCakes118

    • Size

      104KB

    • MD5

      24a431ab02c85f099a3bf5e0b0c7fdbb

    • SHA1

      5ef3ccbdf14091318bfa59766d41280d6c778300

    • SHA256

      52ee268837cf08ff9002dd5bf4a09d50789bb255f0af15d1524973bc72444a58

    • SHA512

      aa06faa9369ec0eac8e2f19e25980640e424ebf28d6305bad29a464b74c51ff11329a692b9fe825261e2149865652601e370656288c14bd1787ff81556c8a72e

    • SSDEEP

      1536:VWYGZwOzVS5DF90Zpy24iKK4NFkmvhEhE6R/lbn9Wqzz:AfSApy24iKK4NSmKE6R/lb9Wq

    Score
    7/10
    persistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks