Overview

overview

10

Static

static

7

653c9f4312...18.exe

windows7-x64

10

653c9f4312...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    653c9f4312c64020ac55d607843c383b_JaffaCakes118

  • Size

    194KB

  • Sample

    240722-3gm4yathrf

  • MD5

    653c9f4312c64020ac55d607843c383b

  • SHA1

    26a0460783f002772c50e4693da94e2ef179b602

  • SHA256

    d502463cb73725af91506bf688a7d316e319edc3a1653ef915f5d681936143c5

  • SHA512

    725532142b251d474421100567c56bcc36013284e5580d57ee702f4cc87581680025f789c4844147a7a249921b19271095ee4e719c7f3dd2467e283ff01e764f

  • SSDEEP

    1536:ToqxQ32KEcPeFYLrWcOdtkR9WI0qlfmQxe9oqYCQd2Dt6LTdDoqYCQd2Dt6LTmcR:FW2KP9LrWBtkGuCIY6LTGCIY6LTVOK

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      653c9f4312c64020ac55d607843c383b_JaffaCakes118

    • Size

      194KB

    • MD5

      653c9f4312c64020ac55d607843c383b

    • SHA1

      26a0460783f002772c50e4693da94e2ef179b602

    • SHA256

      d502463cb73725af91506bf688a7d316e319edc3a1653ef915f5d681936143c5

    • SHA512

      725532142b251d474421100567c56bcc36013284e5580d57ee702f4cc87581680025f789c4844147a7a249921b19271095ee4e719c7f3dd2467e283ff01e764f

    • SSDEEP

      1536:ToqxQ32KEcPeFYLrWcOdtkR9WI0qlfmQxe9oqYCQd2Dt6LTdDoqYCQd2Dt6LTmcR:FW2KP9LrWBtkGuCIY6LTGCIY6LTVOK

    Score
    10/10
    evasionpersistenceupx

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks