Overview

overview

8

Static

static

7

38cc175b35...18.exe

windows7-x64

8

38cc175b35...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38cc175b35272cdbec2adc349e54344e_JaffaCakes118

  • Size

    121KB

  • Sample

    240711-mvd57ashrj

  • MD5

    38cc175b35272cdbec2adc349e54344e

  • SHA1

    ccd55bc3d9e9227343044bed260c5ff7a4d7acf0

  • SHA256

    2a100ccab9aaea7c758afad4aa36de08892699ef6be262a7d0a6cba874034281

  • SHA512

    1b5f92617a24d78014b10b40b2a55c60133b756b3f102619d9e343cc4a942e029c6a475ecf8d20019ac44677f4c500542582aed6d7c2eb73181d10e1f7a229c3

  • SSDEEP

    3072:a/C9DcNsrwlD4khJtBz1bP0AFNnesTyXmZltb1Toutyl:aWslkkhJtPP0iNeQymlxToS

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      38cc175b35272cdbec2adc349e54344e_JaffaCakes118

    • Size

      121KB

    • MD5

      38cc175b35272cdbec2adc349e54344e

    • SHA1

      ccd55bc3d9e9227343044bed260c5ff7a4d7acf0

    • SHA256

      2a100ccab9aaea7c758afad4aa36de08892699ef6be262a7d0a6cba874034281

    • SHA512

      1b5f92617a24d78014b10b40b2a55c60133b756b3f102619d9e343cc4a942e029c6a475ecf8d20019ac44677f4c500542582aed6d7c2eb73181d10e1f7a229c3

    • SSDEEP

      3072:a/C9DcNsrwlD4khJtBz1bP0AFNnesTyXmZltb1Toutyl:aWslkkhJtPP0iNeQymlxToS

    Score
    8/10
    discoverypersistenceupx

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks