Overview

overview

7

Static

static

3

81c3de915a...18.exe

windows7-x64

3

81c3de915a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81c3de915aeea2f5c00e697beee2b6d6_JaffaCakes118

  • Size

    61KB

  • Sample

    240801-zvesyaweqp

  • MD5

    81c3de915aeea2f5c00e697beee2b6d6

  • SHA1

    573b170236042b8264f66a952e85236e3748c0d4

  • SHA256

    60444bdb0f82de3701a65256f4fb6ee1a9476b4e3981e2e77c615c066fe9f916

  • SHA512

    843979ca3155ad4255633a8419475a5e0a2d3102a6acc17618f97fc06f20207ba91fa9bcf398360d104f9183f4ceef3a2e2e4ad045e944bfc0a405d321c6ac44

  • SSDEEP

    1536:w/2YdvcD6ITK/WxJ5tDCXJoW/dn028FN9+B/s1UfSXX:5cv+6IW/W6/9laN9+ByU6XX

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      81c3de915aeea2f5c00e697beee2b6d6_JaffaCakes118

    • Size

      61KB

    • MD5

      81c3de915aeea2f5c00e697beee2b6d6

    • SHA1

      573b170236042b8264f66a952e85236e3748c0d4

    • SHA256

      60444bdb0f82de3701a65256f4fb6ee1a9476b4e3981e2e77c615c066fe9f916

    • SHA512

      843979ca3155ad4255633a8419475a5e0a2d3102a6acc17618f97fc06f20207ba91fa9bcf398360d104f9183f4ceef3a2e2e4ad045e944bfc0a405d321c6ac44

    • SSDEEP

      1536:w/2YdvcD6ITK/WxJ5tDCXJoW/dn028FN9+B/s1UfSXX:5cv+6IW/W6/9laN9+ByU6XX

    Score
    7/10
    discoverypersistenceupx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks