Overview

overview

7

Static

static

7

StartupMonitor.exe

windows7-x64

7

StartupMonitor.exe

windows10-2004-x64

7

StartupMonitor.msi

windows7-x64

6

StartupMonitor.msi

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    28a2f6214894e9b5a163357fd59a4b4a_JaffaCakes118

  • Size

    95KB

  • Sample

    240706-srz65svema

  • MD5

    28a2f6214894e9b5a163357fd59a4b4a

  • SHA1

    d94081df7b20ee33fd7e5ec11b5777ad3ed15393

  • SHA256

    bbe7449053cc8de08a9e4ef2d3f37aa2c17fc1140176faca891347ad6eda0a56

  • SHA512

    3f9237daeb34c37094d38e2c3d40925da4d792e8ecff5edb7e8a09268a42f49db955f8b08429884335cdf7a5c94c2b9df44377ec80fd517585685c4bb714efbc

  • SSDEEP

    1536:eofvYMXMQUI3V7omGrFhH1DcF+xCzyjzfRYKruVTbe+uiDa4D5Y06JtKlXpomfNC:eofvYsUI3lozrf8M3p/QTbe4D5XKgxps

Score
7/10
persistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      StartupMonitor.exe

    • Size

      35KB

    • MD5

      9c3246d2c896081b47fd5075472d8e6a

    • SHA1

      6b2fb02b85c8bbfdbdaed77299b970a5ba2ae295

    • SHA256

      e6021d7ae194f8010acadb07f5cb64439295e15328092c932fa2d5778888381e

    • SHA512

      c9f772fd0a25ca701c69da33540040362ae6a24caaa3206ac5f25013bfc6bb8e74809dc64529760b009377f78f7bd3c681a4ad1d046a9dbcf60752f2b0fb7ccc

    • SSDEEP

      768:sqBXsYbaKzHsEcX/55DcLKhClYWvo2XP+/rp7Z+duP:sqBXsYbTHsEcv55ILkCbv9O9+duP

    Score
    7/10
    upx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

    • Target

      StartupMonitor.msi

    • Size

      125KB

    • MD5

      31335edfec84e7c10f87261007d443d9

    • SHA1

      fbc96f21e0631044a4c0ba20ab0d73243d4fd07d

    • SHA256

      cba1deb15596a22c8040dfa9be4cc18bd457f51667c4733322166357f390c90f

    • SHA512

      68f52e8fb86c255f3b4f15974f5b8f471e1d795d3dc271a421bad2c6190281deb6e9dcd42077e9738d435b8b3561c9726b64faf134de415b8efa7d1f828a5495

    • SSDEEP

      1536:KsyfsJ9gqvH0HmgOWSPhOUosAt2RQ48BhYBDTNk+D4wqsm:MYguH0SPhBosAt22BhYBXNk+DW

    Score
    6/10
    persistenceprivilege_escalation

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks