Overview

overview

7

Static

static

3

872cd49134...18.exe

windows7-x64

7

872cd49134...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    872cd49134e8513b8af35b815ee2eda2_JaffaCakes118

  • Size

    385KB

  • Sample

    240810-w48kts1hpq

  • MD5

    872cd49134e8513b8af35b815ee2eda2

  • SHA1

    84388b4096a8290367dfdbdeb9b408dc243f2d9f

  • SHA256

    2813a70af36193f9ebba0ab6491c6cd2658522fd89908d0ec1160349d63a2285

  • SHA512

    5ffa0cd5cc971dbc4c5505a50d18ec8a4aa3098a335b6cfe9fa1aeb4b346e515bde081074b5e92c77217a4472a343eb741ff234ea0db8b668d2ce4711d4df2cc

  • SSDEEP

    6144:fodv/dxKQbm0q6NiQGagJhwTl8qXojWp3mqDhfZR+t5k5QBPeJ:fotKQi9aDxhhWqVfjEPm

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      872cd49134e8513b8af35b815ee2eda2_JaffaCakes118

    • Size

      385KB

    • MD5

      872cd49134e8513b8af35b815ee2eda2

    • SHA1

      84388b4096a8290367dfdbdeb9b408dc243f2d9f

    • SHA256

      2813a70af36193f9ebba0ab6491c6cd2658522fd89908d0ec1160349d63a2285

    • SHA512

      5ffa0cd5cc971dbc4c5505a50d18ec8a4aa3098a335b6cfe9fa1aeb4b346e515bde081074b5e92c77217a4472a343eb741ff234ea0db8b668d2ce4711d4df2cc

    • SSDEEP

      6144:fodv/dxKQbm0q6NiQGagJhwTl8qXojWp3mqDhfZR+t5k5QBPeJ:fotKQi9aDxhhWqVfjEPm

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks