Overview

overview

7

Static

static

3

5a8649a2f9...18.exe

windows7-x64

7

5a8649a2f9...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a8649a2f98137f777ff71a0252e19bb_JaffaCakes118

  • Size

    171KB

  • Sample

    240719-ffc61swgqf

  • MD5

    5a8649a2f98137f777ff71a0252e19bb

  • SHA1

    f4fec2fafb7b16b8df746361fc6cf6bb4fd56fb4

  • SHA256

    29774d13d0e0d74f767ea8b2b70fab35d686d1c6359d0b30dd2dcfb62dfcdc3d

  • SHA512

    b9617f55e032b12524854a1b6e9ed00f5841f307838da6c3bcd707751e484315965ab892c07e7c01e51461ef53f5d42221feeac97ea9379bd281891ef19df56e

  • SSDEEP

    3072:On3ObbQgBhw8ZHSfYEeqEVo10n69/LUKfVlwOieJHh7M4rh3q4vDxrLmkG80ZNSB:On3OvZ5yz1e69DUK/NTJB7M413qSD5Jv

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      5a8649a2f98137f777ff71a0252e19bb_JaffaCakes118

    • Size

      171KB

    • MD5

      5a8649a2f98137f777ff71a0252e19bb

    • SHA1

      f4fec2fafb7b16b8df746361fc6cf6bb4fd56fb4

    • SHA256

      29774d13d0e0d74f767ea8b2b70fab35d686d1c6359d0b30dd2dcfb62dfcdc3d

    • SHA512

      b9617f55e032b12524854a1b6e9ed00f5841f307838da6c3bcd707751e484315965ab892c07e7c01e51461ef53f5d42221feeac97ea9379bd281891ef19df56e

    • SSDEEP

      3072:On3ObbQgBhw8ZHSfYEeqEVo10n69/LUKfVlwOieJHh7M4rh3q4vDxrLmkG80ZNSB:On3OvZ5yz1e69DUK/NTJB7M413qSD5Jv

    Score
    7/10
    persistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks