Overview

overview

8

Static

static

3

8de763705d...18.exe

windows7-x64

8

8de763705d...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8de763705d6aa896ab87c95adeca7be8_JaffaCakes118

  • Size

    369KB

  • Sample

    240812-jmgdsswdkc

  • MD5

    8de763705d6aa896ab87c95adeca7be8

  • SHA1

    d01a5bb42aefd67529d58de4aaa96664c01117ae

  • SHA256

    60f71ae56ea5a0d49e5365cd516ef36caf1d07f086ffc052a64432363dcd0fe1

  • SHA512

    c0d1b93b1a5ff38499f8e7dacc1374b64f7c1425f55dc048d693e8715f1dbf915dd5ce76b1b0ec84ca9b4936187d3a1db628d3fdd46fd327fcafd357ae84cb3d

  • SSDEEP

    6144:INmDB8I/GnZFds3M6nvAObxr+Hd+d8w9yoDjPJHtZxREJa+/2K49A5c7WByoHBNp:d6pnls3M6nvAK+HAyYV7xmt/2c5bHB

Score
8/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      8de763705d6aa896ab87c95adeca7be8_JaffaCakes118

    • Size

      369KB

    • MD5

      8de763705d6aa896ab87c95adeca7be8

    • SHA1

      d01a5bb42aefd67529d58de4aaa96664c01117ae

    • SHA256

      60f71ae56ea5a0d49e5365cd516ef36caf1d07f086ffc052a64432363dcd0fe1

    • SHA512

      c0d1b93b1a5ff38499f8e7dacc1374b64f7c1425f55dc048d693e8715f1dbf915dd5ce76b1b0ec84ca9b4936187d3a1db628d3fdd46fd327fcafd357ae84cb3d

    • SSDEEP

      6144:INmDB8I/GnZFds3M6nvAObxr+Hd+d8w9yoDjPJHtZxREJa+/2K49A5c7WByoHBNp:d6pnls3M6nvAK+HAyYV7xmt/2c5bHB

    Score
    8/10
    discoveryevasionpersistenceupx

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks