Overview

overview

7

Static

static

3

5ba6fef539...18.exe

windows7-x64

7

5ba6fef539...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5ba6fef5399cfe53656012d64306b597_JaffaCakes118

  • Size

    396KB

  • Sample

    240719-m3rq9a1cpe

  • MD5

    5ba6fef5399cfe53656012d64306b597

  • SHA1

    3e13d72dc7c66c9ca3b9bd0ec139e48dbb10b40d

  • SHA256

    2ddec15febf58f823dc37913bca85da4b11a81a6ce7f256aba29a15bfdc79695

  • SHA512

    a55ae4fbe368e713dc50528abb2a7c2c7f4e144933ba307e62ddebaafc23eae8918196a2ce99155d44d630ac48b68bb74273e20283efcea8101c78008d2a58a3

  • SSDEEP

    6144:cpBQGk2gTP4DYqyj7dDE71fqmBSqQ3sjaBkYRMro5kfd1mOcsZnMTT3EApm5zj8O:cpRk2gLKyjm758q8p8usZMf3Nmpj9

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      5ba6fef5399cfe53656012d64306b597_JaffaCakes118

    • Size

      396KB

    • MD5

      5ba6fef5399cfe53656012d64306b597

    • SHA1

      3e13d72dc7c66c9ca3b9bd0ec139e48dbb10b40d

    • SHA256

      2ddec15febf58f823dc37913bca85da4b11a81a6ce7f256aba29a15bfdc79695

    • SHA512

      a55ae4fbe368e713dc50528abb2a7c2c7f4e144933ba307e62ddebaafc23eae8918196a2ce99155d44d630ac48b68bb74273e20283efcea8101c78008d2a58a3

    • SSDEEP

      6144:cpBQGk2gTP4DYqyj7dDE71fqmBSqQ3sjaBkYRMro5kfd1mOcsZnMTT3EApm5zj8O:cpRk2gLKyjm758q8p8usZMf3Nmpj9

    Score
    7/10
    persistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks