Overview

overview

7

Static

static

7

6f2f5f9b9f...18.exe

windows7-x64

7

6f2f5f9b9f...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f2f5f9b9f4861b27a6c6dab42d0f59d_JaffaCakes118

  • Size

    33KB

  • Sample

    240725-md6h4swdje

  • MD5

    6f2f5f9b9f4861b27a6c6dab42d0f59d

  • SHA1

    2af4bf65daa564b35a17cf3d9bdeeaf6cd1fe5c8

  • SHA256

    87d0013a2359515671bba6ea29eaa8484b2cd6af3f236d26c4a2005c5832d70f

  • SHA512

    2b14765eae4fb5338ccc9f208890ca82bae969283f4e749eccf25d99af069f7b4404347b8ccee691f4cf91bf773f3c1d8d15b290de79728d365606782ba1ae84

  • SSDEEP

    768:Kd7JkDn6fixEFfDew6B6tqBCHwvWgy6FJTVj6HcV:E2OfLfCVYqCgy6FJTVjqcV

Score
7/10
adwarediscoverystealerupx

Malware Config

Targets

    • Target

      6f2f5f9b9f4861b27a6c6dab42d0f59d_JaffaCakes118

    • Size

      33KB

    • MD5

      6f2f5f9b9f4861b27a6c6dab42d0f59d

    • SHA1

      2af4bf65daa564b35a17cf3d9bdeeaf6cd1fe5c8

    • SHA256

      87d0013a2359515671bba6ea29eaa8484b2cd6af3f236d26c4a2005c5832d70f

    • SHA512

      2b14765eae4fb5338ccc9f208890ca82bae969283f4e749eccf25d99af069f7b4404347b8ccee691f4cf91bf773f3c1d8d15b290de79728d365606782ba1ae84

    • SSDEEP

      768:Kd7JkDn6fixEFfDew6B6tqBCHwvWgy6FJTVj6HcV:E2OfLfCVYqCgy6FJTVjqcV

    Score
    7/10
    adwarediscoverystealerupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks