Overview

overview

8

Static

static

7

36f295a31b...18.exe

windows7-x64

8

36f295a31b...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    36f295a31b4b8edbb37db6c5ce1eb8f6_JaffaCakes118

  • Size

    9KB

  • Sample

    240711-aecwzazfqa

  • MD5

    36f295a31b4b8edbb37db6c5ce1eb8f6

  • SHA1

    a9a437358ddb7f6ffab8697849ab65f39a99aa26

  • SHA256

    3db5d39a07b5d2a445657ea0bff5f93495d97da49ca987b9fe01be10c214402d

  • SHA512

    1dff175d8c4b34a1e5f9465c00dfecf402f9a824d821dc251d4229e4ad4201d4fd4bf20c8bc1df2a796e152b9df4e32747c11a45bac828e16997a29560e03bd7

  • SSDEEP

    192:35KbiSeDb7aYrQtLvp2zgLt3YgwK4PRzZ:wbi/XmYrQtN2cLt3YggPT

Score
8/10
persistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      36f295a31b4b8edbb37db6c5ce1eb8f6_JaffaCakes118

    • Size

      9KB

    • MD5

      36f295a31b4b8edbb37db6c5ce1eb8f6

    • SHA1

      a9a437358ddb7f6ffab8697849ab65f39a99aa26

    • SHA256

      3db5d39a07b5d2a445657ea0bff5f93495d97da49ca987b9fe01be10c214402d

    • SHA512

      1dff175d8c4b34a1e5f9465c00dfecf402f9a824d821dc251d4229e4ad4201d4fd4bf20c8bc1df2a796e152b9df4e32747c11a45bac828e16997a29560e03bd7

    • SSDEEP

      192:35KbiSeDb7aYrQtLvp2zgLt3YgwK4PRzZ:wbi/XmYrQtN2cLt3YggPT

    Score
    8/10
    persistenceprivilege_escalationupx

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks