Overview

overview

7

Static

static

7

746bef0105...18.exe

windows7-x64

7

746bef0105...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    746bef01056a1e390de4dd05730df6a8_JaffaCakes118

  • Size

    459KB

  • Sample

    240726-rn1g3ashpr

  • MD5

    746bef01056a1e390de4dd05730df6a8

  • SHA1

    810da31e3cc8a0e801031e832a7ce41f80353a60

  • SHA256

    18f34e8fc05478f8d3eab56c4597b4c48f99b6ebcb74e3aed81febb3e9320329

  • SHA512

    9614f5d2a66599ed6c9a4f8ef3d4d2b616a826ad98ffdbece972630abb506ffdf1877bdd0150fec8f2a4dc9cae9f39f73d509024cfe7437be8200ddd017cdc0a

  • SSDEEP

    6144:U+7CcSJzOGT/2oHnsUTMyXxavz4+aG1Wj8FcNMcFxXz7Rj75SodSA95rZEu/VA8d:hCjmzcFh3SzA95Nx/SnMuvMcNo2q

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      746bef01056a1e390de4dd05730df6a8_JaffaCakes118

    • Size

      459KB

    • MD5

      746bef01056a1e390de4dd05730df6a8

    • SHA1

      810da31e3cc8a0e801031e832a7ce41f80353a60

    • SHA256

      18f34e8fc05478f8d3eab56c4597b4c48f99b6ebcb74e3aed81febb3e9320329

    • SHA512

      9614f5d2a66599ed6c9a4f8ef3d4d2b616a826ad98ffdbece972630abb506ffdf1877bdd0150fec8f2a4dc9cae9f39f73d509024cfe7437be8200ddd017cdc0a

    • SSDEEP

      6144:U+7CcSJzOGT/2oHnsUTMyXxavz4+aG1Wj8FcNMcFxXz7Rj75SodSA95rZEu/VA8d:hCjmzcFh3SzA95Nx/SnMuvMcNo2q

    Score
    7/10
    discoverypersistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks