Overview

overview

8

Static

static

7

63d8c4e308...18.exe

windows7-x64

8

63d8c4e308...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63d8c4e3082e05144b60ba96755ebb43_JaffaCakes118

  • Size

    16KB

  • Sample

    240722-thn8yswamg

  • MD5

    63d8c4e3082e05144b60ba96755ebb43

  • SHA1

    a7476989423dc65bb6a7ba85ebb4dde9ce79fdeb

  • SHA256

    3ef4c5ea3b3e4ee6502d5e0df8c97198474453a56e14d060b1e67d6343e03200

  • SHA512

    be5ffb4865b2f9039d611034ec40dfa4a24ca5c30a14311ed953f9c35213df49e6559945cab9eaf099090e9633d7c5043b51109bf67d5d10752ef87841921445

  • SSDEEP

    384:EQ2kuizI0H0DqoDlF2o4MjtNeeC1AyNBFg7:EQ5NzUuorVjbeeWg

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      63d8c4e3082e05144b60ba96755ebb43_JaffaCakes118

    • Size

      16KB

    • MD5

      63d8c4e3082e05144b60ba96755ebb43

    • SHA1

      a7476989423dc65bb6a7ba85ebb4dde9ce79fdeb

    • SHA256

      3ef4c5ea3b3e4ee6502d5e0df8c97198474453a56e14d060b1e67d6343e03200

    • SHA512

      be5ffb4865b2f9039d611034ec40dfa4a24ca5c30a14311ed953f9c35213df49e6559945cab9eaf099090e9633d7c5043b51109bf67d5d10752ef87841921445

    • SSDEEP

      384:EQ2kuizI0H0DqoDlF2o4MjtNeeC1AyNBFg7:EQ5NzUuorVjbeeWg

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks