Overview

overview

7

Static

static

7

83815ef60d...18.exe

windows7-x64

7

83815ef60d...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    83815ef60dd684ec2c3f35f12149515d_JaffaCakes118

  • Size

    793KB

  • Sample

    240809-zlj2asyclj

  • MD5

    83815ef60dd684ec2c3f35f12149515d

  • SHA1

    1298053b51921b9b117c4f63910960e501f8c62e

  • SHA256

    62dfbe6ab83fdefffc2d764752d7d4d192ac81ff8d334e4f060c71b204651202

  • SHA512

    616ab56632ab1e0374c3d7fcc2bf9bfc6ee8b35b14c55cd2ca903455e0e6798210fe7bfca9eca30e4ec0252a3a11a28b011ea6f47abb9d175e27a445c1302652

  • SSDEEP

    24576:NmOVJI7GxS7WU2JIfqO/uPHHzGEExwWBWvh:NhG71yUsIySuPHH4WeWvh

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      83815ef60dd684ec2c3f35f12149515d_JaffaCakes118

    • Size

      793KB

    • MD5

      83815ef60dd684ec2c3f35f12149515d

    • SHA1

      1298053b51921b9b117c4f63910960e501f8c62e

    • SHA256

      62dfbe6ab83fdefffc2d764752d7d4d192ac81ff8d334e4f060c71b204651202

    • SHA512

      616ab56632ab1e0374c3d7fcc2bf9bfc6ee8b35b14c55cd2ca903455e0e6798210fe7bfca9eca30e4ec0252a3a11a28b011ea6f47abb9d175e27a445c1302652

    • SSDEEP

      24576:NmOVJI7GxS7WU2JIfqO/uPHHzGEExwWBWvh:NhG71yUsIySuPHH4WeWvh

    Score
    7/10
    discoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks