Overview

overview

7

Static

static

7

5ac850c166...18.exe

windows7-x64

7

5ac850c166...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5ac850c166ae3c886905e9000efd80df_JaffaCakes118

  • Size

    495KB

  • Sample

    240719-g2k97awfkk

  • MD5

    5ac850c166ae3c886905e9000efd80df

  • SHA1

    6621b2992d7b7701abd4aaa379f30b174203937f

  • SHA256

    dce0bbebc5caa6cc70c57f0c2f49a6a0714f0ca62b84af0d6a46004c28b13be7

  • SHA512

    8aa135b15268e07e049f2ab05d7bfbc834cf47505ae300ed54d6ccc27a489b2872fb56ca868bfed6c54513718fb305b6f9a0d5414db68c909f7463c8f08a563c

  • SSDEEP

    12288:90J+JAS1pELkD9lUE3hQJXFuwZbFBCSImFLxsDWKTWneoS:l7PE4DN3hQdtFB9LqDWK

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      5ac850c166ae3c886905e9000efd80df_JaffaCakes118

    • Size

      495KB

    • MD5

      5ac850c166ae3c886905e9000efd80df

    • SHA1

      6621b2992d7b7701abd4aaa379f30b174203937f

    • SHA256

      dce0bbebc5caa6cc70c57f0c2f49a6a0714f0ca62b84af0d6a46004c28b13be7

    • SHA512

      8aa135b15268e07e049f2ab05d7bfbc834cf47505ae300ed54d6ccc27a489b2872fb56ca868bfed6c54513718fb305b6f9a0d5414db68c909f7463c8f08a563c

    • SSDEEP

      12288:90J+JAS1pELkD9lUE3hQJXFuwZbFBCSImFLxsDWKTWneoS:l7PE4DN3hQdtFB9LqDWK

    Score
    7/10
    persistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks