Overview

overview

7

Static

static

3

4ca1ce292e...18.exe

windows7-x64

7

4ca1ce292e...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4ca1ce292ed7f5353656ceac2a6cf65e_JaffaCakes118

  • Size

    392KB

  • Sample

    240716-d2q9nawbmb

  • MD5

    4ca1ce292ed7f5353656ceac2a6cf65e

  • SHA1

    62fcfc885b2add4908af084d9cee1efd649eb75e

  • SHA256

    80ea5385e4fd0ff0338e18191aa2b880da5955a68497f2ed7b92dfccfec26112

  • SHA512

    9139dbe261393a7ff38eadf275a9cdd4cb484cb7ed617c70554ff1325e7a3d466d4376af638b2a5c02857ea8ee552d8f9e5712e0d27706446ebb687e7d76ba62

  • SSDEEP

    6144:w2KEvF/mge9bW/1N9P9dJUdgwAlBanW3z1ggRO79+gBJEnNAnkOBL:/vFeL9bEdCOwAlBBZh07JXGbGL

Score
7/10
persistenceupxvmprotect

Malware Config

Targets

    • Target

      4ca1ce292ed7f5353656ceac2a6cf65e_JaffaCakes118

    • Size

      392KB

    • MD5

      4ca1ce292ed7f5353656ceac2a6cf65e

    • SHA1

      62fcfc885b2add4908af084d9cee1efd649eb75e

    • SHA256

      80ea5385e4fd0ff0338e18191aa2b880da5955a68497f2ed7b92dfccfec26112

    • SHA512

      9139dbe261393a7ff38eadf275a9cdd4cb484cb7ed617c70554ff1325e7a3d466d4376af638b2a5c02857ea8ee552d8f9e5712e0d27706446ebb687e7d76ba62

    • SSDEEP

      6144:w2KEvF/mge9bW/1N9P9dJUdgwAlBanW3z1ggRO79+gBJEnNAnkOBL:/vFeL9bEdCOwAlBBZh07JXGbGL

    Score
    7/10
    persistenceupxvmprotect

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks