Overview

overview

8

Static

static

7

5b1bb570b2...18.exe

windows7-x64

8

5b1bb570b2...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5b1bb570b22d6dbdaadf8d865e1be7d0_JaffaCakes118

  • Size

    95KB

  • Sample

    240719-j1ky5stgpa

  • MD5

    5b1bb570b22d6dbdaadf8d865e1be7d0

  • SHA1

    5be6ee5cd172ea94efa6ae49259354814d6f09c4

  • SHA256

    1174aa31c999a21faa49b765757c164b3d51a6e85cff1e9fdf184eb785ef1b32

  • SHA512

    bd63d6a5548b1239fed72c29965ddb84fd216c1be2f4fa2a85c088d335395930b1b7434520f0ca7537ad34400be24128372fdcacd46b0ffa5e7921fb36731f43

  • SSDEEP

    1536:HC6g2KL+bD/wWQQZ55z+N0uJ+nL1UWQS2P0Fz2wAJLHPW8kwpDqPSi1VAlaU9/E0:HCz2KmD/wWHcRIn5UzSJVAVPW6q7Alai

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      5b1bb570b22d6dbdaadf8d865e1be7d0_JaffaCakes118

    • Size

      95KB

    • MD5

      5b1bb570b22d6dbdaadf8d865e1be7d0

    • SHA1

      5be6ee5cd172ea94efa6ae49259354814d6f09c4

    • SHA256

      1174aa31c999a21faa49b765757c164b3d51a6e85cff1e9fdf184eb785ef1b32

    • SHA512

      bd63d6a5548b1239fed72c29965ddb84fd216c1be2f4fa2a85c088d335395930b1b7434520f0ca7537ad34400be24128372fdcacd46b0ffa5e7921fb36731f43

    • SSDEEP

      1536:HC6g2KL+bD/wWQQZ55z+N0uJ+nL1UWQS2P0Fz2wAJLHPW8kwpDqPSi1VAlaU9/E0:HCz2KmD/wWHcRIn5UzSJVAVPW6q7Alai

    Score
    8/10
    discoverypersistenceupx

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks