Overview

overview

7

Static

static

7

2f34921016...18.exe

windows7-x64

7

2f34921016...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2f349210165621a69aa39f737c21cd79_JaffaCakes118

  • Size

    183KB

  • Sample

    240709-glht5a1enh

  • MD5

    2f349210165621a69aa39f737c21cd79

  • SHA1

    bed11207c8f6482e6404dbb0c46e0e3f2164f6de

  • SHA256

    c6b35769327d0ae832d3844fa06725ccf8c3d9394d659ade7d87a205576cb540

  • SHA512

    fb4ef2c290eb5360e203641d2cc343ff6c98041ef8d3d1e4e1484591a0f357ec806cabec4ea3cde954760572aa5668012538f89e56129616f61ff2e2287f0dd5

  • SSDEEP

    3072:jfFH0Uxbw5dG93+7wwE9fWf9+kbGvJF4Ihe9gl4N6x5zeJPMD1IAmlDMR/ivY5hJ:jfFHn+Q+kwiuldbG059w46EJkD10QIYz

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      2f349210165621a69aa39f737c21cd79_JaffaCakes118

    • Size

      183KB

    • MD5

      2f349210165621a69aa39f737c21cd79

    • SHA1

      bed11207c8f6482e6404dbb0c46e0e3f2164f6de

    • SHA256

      c6b35769327d0ae832d3844fa06725ccf8c3d9394d659ade7d87a205576cb540

    • SHA512

      fb4ef2c290eb5360e203641d2cc343ff6c98041ef8d3d1e4e1484591a0f357ec806cabec4ea3cde954760572aa5668012538f89e56129616f61ff2e2287f0dd5

    • SSDEEP

      3072:jfFH0Uxbw5dG93+7wwE9fWf9+kbGvJF4Ihe9gl4N6x5zeJPMD1IAmlDMR/ivY5hJ:jfFHn+Q+kwiuldbG059w46EJkD10QIYz

    Score
    7/10
    persistenceupx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks