Overview

overview

7

Static

static

3

8df22aa64b...18.exe

windows7-x64

7

8df22aa64b...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8df22aa64b9b0b88c629660194951048_JaffaCakes118

  • Size

    442KB

  • Sample

    240812-jwcf7swfrg

  • MD5

    8df22aa64b9b0b88c629660194951048

  • SHA1

    8b434e6d046101575a9452f64de5f09222c17266

  • SHA256

    73f82449aaf8fa03b35c17025eeebee21d51d2853dff59b920c35d85b4a7de59

  • SHA512

    d214befcfb660faf5a17b1292d7fad74faa83435d18cd9f8cdf6834349d6c536d7be4bf742718d8d88c86677d866604f1bb5643ebf179577cd86f6ad058f222b

  • SSDEEP

    12288:nVbeu/B+/iuKGSY4yPreIcV9W8HPCWmER:NeT/5hTcXWQi

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      8df22aa64b9b0b88c629660194951048_JaffaCakes118

    • Size

      442KB

    • MD5

      8df22aa64b9b0b88c629660194951048

    • SHA1

      8b434e6d046101575a9452f64de5f09222c17266

    • SHA256

      73f82449aaf8fa03b35c17025eeebee21d51d2853dff59b920c35d85b4a7de59

    • SHA512

      d214befcfb660faf5a17b1292d7fad74faa83435d18cd9f8cdf6834349d6c536d7be4bf742718d8d88c86677d866604f1bb5643ebf179577cd86f6ad058f222b

    • SSDEEP

      12288:nVbeu/B+/iuKGSY4yPreIcV9W8HPCWmER:NeT/5hTcXWQi

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks