Overview

overview

8

Static

static

7

9611a8dc14...18.exe

windows7-x64

8

9611a8dc14...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9611a8dc142f8d722b04ac76389e16e9_JaffaCakes118

  • Size

    6KB

  • Sample

    240814-pgjvmawerr

  • MD5

    9611a8dc142f8d722b04ac76389e16e9

  • SHA1

    b8e083f85d16d40e894eec971f48d28bf88d8c1c

  • SHA256

    e4839a723886f69c6f82fe9970d4adfdc3d6c4dee95ef8202859433ad7d9d861

  • SHA512

    06cdb4b6c25feaffcf15635bc2b02a7170d9bfac8ec118465f631a27414d64ad48caf9394c0afbe38439b7d2c3e39666ba3463ed56b4bd4e4dc2bc9e4cdc222d

  • SSDEEP

    96:o+sKQYu8u0J81Pyd6jgqC9Upq1CKPYKSa1aqDOJ9kq1R/X7Dw3YXmI:o+szB8G1PO6jgVFLYo1S9k6Xw3smI

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      9611a8dc142f8d722b04ac76389e16e9_JaffaCakes118

    • Size

      6KB

    • MD5

      9611a8dc142f8d722b04ac76389e16e9

    • SHA1

      b8e083f85d16d40e894eec971f48d28bf88d8c1c

    • SHA256

      e4839a723886f69c6f82fe9970d4adfdc3d6c4dee95ef8202859433ad7d9d861

    • SHA512

      06cdb4b6c25feaffcf15635bc2b02a7170d9bfac8ec118465f631a27414d64ad48caf9394c0afbe38439b7d2c3e39666ba3463ed56b4bd4e4dc2bc9e4cdc222d

    • SSDEEP

      96:o+sKQYu8u0J81Pyd6jgqC9Upq1CKPYKSa1aqDOJ9kq1R/X7Dw3YXmI:o+szB8G1PO6jgVFLYo1S9k6Xw3smI

    Score
    8/10
    discoverypersistenceupx

    • Contacts a large (1660) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks