Overview

overview

7

Static

static

3

787832c005...18.exe

windows7-x64

7

787832c005...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    787832c005650d26c76d14739cbba3b9_JaffaCakes118

  • Size

    453KB

  • Sample

    240727-rptqxawgjd

  • MD5

    787832c005650d26c76d14739cbba3b9

  • SHA1

    c651d4a65977b7b7250f2b764ad15fca6094f61b

  • SHA256

    604e07cc049b2e85c2a06136337b612f67bd6e48c3b8c62515aa0c739a0475b2

  • SHA512

    9df78e383814926bc3dea93e7ca626548ffbe3976795761c51d6537139144698a55ea7b7c3be8bdae315d642046486d52aaa99de7a52475527b5251ac5b558f3

  • SSDEEP

    12288:fpmG5hK/jALOg4+ZbtnENlRxp8BDmV1Mk:RmY0/Rg46btnENl2DmH

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      787832c005650d26c76d14739cbba3b9_JaffaCakes118

    • Size

      453KB

    • MD5

      787832c005650d26c76d14739cbba3b9

    • SHA1

      c651d4a65977b7b7250f2b764ad15fca6094f61b

    • SHA256

      604e07cc049b2e85c2a06136337b612f67bd6e48c3b8c62515aa0c739a0475b2

    • SHA512

      9df78e383814926bc3dea93e7ca626548ffbe3976795761c51d6537139144698a55ea7b7c3be8bdae315d642046486d52aaa99de7a52475527b5251ac5b558f3

    • SSDEEP

      12288:fpmG5hK/jALOg4+ZbtnENlRxp8BDmV1Mk:RmY0/Rg46btnENl2DmH

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks