Overview

overview

7

Static

static

3

71e8a3671c...18.exe

windows7-x64

7

71e8a3671c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    71e8a3671c61dc40bb52627ad985e6e1_JaffaCakes118

  • Size

    388KB

  • Sample

    240726-ayf3qsyakb

  • MD5

    71e8a3671c61dc40bb52627ad985e6e1

  • SHA1

    72f9165d65a52acd3cab5a66ea2ebfd16e3e89bd

  • SHA256

    fc3a963a49c13fb0daf588e8aef940e61c174c8db653020dc1279d6e39960165

  • SHA512

    acfd18f488e5c7e7ed728641873985780661a6c9b005935da33ebfee2e3004cd22cd467a3f03b97e4ee35024dc9f37661e3f3a72491e089056daeed967df733d

  • SSDEEP

    6144:W5d8V2rj/aJSvpRwC1eMof9JG/mI/TAmRPKJW/TiLNj:W5/r7eSRRQ9imI/TAmRPHO

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      71e8a3671c61dc40bb52627ad985e6e1_JaffaCakes118

    • Size

      388KB

    • MD5

      71e8a3671c61dc40bb52627ad985e6e1

    • SHA1

      72f9165d65a52acd3cab5a66ea2ebfd16e3e89bd

    • SHA256

      fc3a963a49c13fb0daf588e8aef940e61c174c8db653020dc1279d6e39960165

    • SHA512

      acfd18f488e5c7e7ed728641873985780661a6c9b005935da33ebfee2e3004cd22cd467a3f03b97e4ee35024dc9f37661e3f3a72491e089056daeed967df733d

    • SSDEEP

      6144:W5d8V2rj/aJSvpRwC1eMof9JG/mI/TAmRPKJW/TiLNj:W5/r7eSRRQ9imI/TAmRPHO

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks