15af8dd1a7aa19220ff6920862f446415924368228cf81d0e59beb3618ebebc3 | Triage

Submit
Reports

Overview

overview

8

Static

static

7

8961c82456...18.exe

windows7-x64

8

8961c82456...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

Target

8961c824564f45b09516ab42099ea87a_JaffaCakes118
Size

2.0MB
Sample

240811-hgx9pashqf
MD5

8961c824564f45b09516ab42099ea87a
SHA1

e21c887026f35532db6926a173a279a80e66a640
SHA256

15af8dd1a7aa19220ff6920862f446415924368228cf81d0e59beb3618ebebc3
SHA512

30b54912e224a59871150812d802328ee38737c98b01a6d18b158501af52890fba1677192a8fe01ff4c492cd5e2d2984f42eb73341a10fd378e5cf7600f9c435
SSDEEP

49152:HHHH/mk7VkRkOgcmHmk48FQ0NUrg37O9ANcj/EtNbEYbENUhWjlwFR3:HHHH/mkBobgcWmk48FQ0N2g3TNcrEDbV

Score

8^/10

discovery evasion persistence privilege_escalation upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

8961c824564f45b09516ab42099ea87a_JaffaCakes118.exe

Resource

win7-20240704-en

discovery evasion persistence privilege_escalation upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

8961c824564f45b09516ab42099ea87a_JaffaCakes118.exe

Resource

win10v2004-20240802-en

discovery evasion persistence privilege_escalation upx

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  8961c824564f45b09516ab42099ea87a_JaffaCakes118
- Size
  
  2.0MB
- MD5
  
  8961c824564f45b09516ab42099ea87a
- SHA1
  
  e21c887026f35532db6926a173a279a80e66a640
- SHA256
  
  15af8dd1a7aa19220ff6920862f446415924368228cf81d0e59beb3618ebebc3
- SHA512
  
  30b54912e224a59871150812d802328ee38737c98b01a6d18b158501af52890fba1677192a8fe01ff4c492cd5e2d2984f42eb73341a10fd378e5cf7600f9c435
- SSDEEP
  
  49152:HHHH/mk7VkRkOgcmHmk48FQ0NUrg37O9ANcj/EtNbEYbENUhWjlwFR3:HHHH/mkBobgcWmk48FQ0N2g3TNcrEDbV
Score

8^/10

discovery evasion persistence privilege_escalation upx
- Modifies Windows Firewall
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationupx

behavioral2

discoveryevasionpersistenceprivilege_escalationupx

© 2018-2025

Terms | Privacy