Overview

overview

7

Static

static

3

6016924dc7...18.exe

windows7-x64

7

6016924dc7...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6016924dc7c2882048e684d253136f46_JaffaCakes118

  • Size

    637KB

  • Sample

    240720-mcen1a1ekd

  • MD5

    6016924dc7c2882048e684d253136f46

  • SHA1

    db1bcb80e49ffd976eca0732787c0fb4d078e16a

  • SHA256

    675ceffdf4a4911e061e6fe086ff645192b3e61ceb7a588b8cb562e4882086fb

  • SHA512

    b985a3a4e4066c5a2d903ae745170bb66abb5b84e90489f0193bf186e2dceb441fcbc15a67424299ba390a50dc42d3d850bda56ccf359712727cd459c349f9e5

  • SSDEEP

    12288:jbilyBfsEe9v07yBEvPrK1Pi8VPwLaKiFSn19vSYViE:jb7fJeC7yBerKDxKiFg19fVi

Score
7/10
defense_evasionpersistenceupx

Malware Config

Targets

    • Target

      6016924dc7c2882048e684d253136f46_JaffaCakes118

    • Size

      637KB

    • MD5

      6016924dc7c2882048e684d253136f46

    • SHA1

      db1bcb80e49ffd976eca0732787c0fb4d078e16a

    • SHA256

      675ceffdf4a4911e061e6fe086ff645192b3e61ceb7a588b8cb562e4882086fb

    • SHA512

      b985a3a4e4066c5a2d903ae745170bb66abb5b84e90489f0193bf186e2dceb441fcbc15a67424299ba390a50dc42d3d850bda56ccf359712727cd459c349f9e5

    • SSDEEP

      12288:jbilyBfsEe9v07yBEvPrK1Pi8VPwLaKiFSn19vSYViE:jb7fJeC7yBerKDxKiFg19fVi

    Score
    7/10
    defense_evasionpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Impair Defenses: Safe Mode Boot

      defense_evasion

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks