Overview

overview

8

Static

static

7

8bc41aa2f9...18.exe

windows7-x64

8

8bc41aa2f9...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8bc41aa2f906216d384ba8f8cf6553cb_JaffaCakes118

  • Size

    2.0MB

  • Sample

    240811-yrl76szckb

  • MD5

    8bc41aa2f906216d384ba8f8cf6553cb

  • SHA1

    35068fbf8fb49b707d2c90ad2bb473cefbfacdfc

  • SHA256

    11804156a1ee88dea62ac84434c73b5693f867785802c9e906370548bd3814af

  • SHA512

    5b99d4b6569882a532f5f421a26628413510bc155557e8cfdea8984dc88c13056fec7946e7bbcc871602c055ba3be28a327b68add382ca5ab101c03c1f38f8e0

  • SSDEEP

    49152:t4wPO/wF1VSHOsj1BD3SYRGrQaieNBhwhd4:t4wPO/wgHpBZoEaiCBaha

Score
8/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      8bc41aa2f906216d384ba8f8cf6553cb_JaffaCakes118

    • Size

      2.0MB

    • MD5

      8bc41aa2f906216d384ba8f8cf6553cb

    • SHA1

      35068fbf8fb49b707d2c90ad2bb473cefbfacdfc

    • SHA256

      11804156a1ee88dea62ac84434c73b5693f867785802c9e906370548bd3814af

    • SHA512

      5b99d4b6569882a532f5f421a26628413510bc155557e8cfdea8984dc88c13056fec7946e7bbcc871602c055ba3be28a327b68add382ca5ab101c03c1f38f8e0

    • SSDEEP

      49152:t4wPO/wF1VSHOsj1BD3SYRGrQaieNBhwhd4:t4wPO/wgHpBZoEaiCBaha

    Score
    8/10
    defense_evasiondiscoverypersistenceupx

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • Impair Defenses: Safe Mode Boot

      defense_evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks