Overview

overview

10

Static

static

7

mara-fix_1...ix.exe

windows7-x64

mara-fix_1...ix.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    96a9cf0ae0e0c494c5c2332f4089f17e_JaffaCakes118

  • Size

    696KB

  • Sample

    240814-swnznsvcln

  • MD5

    96a9cf0ae0e0c494c5c2332f4089f17e

  • SHA1

    bcf9c76a75988cabf34b1f16b81f6550828d6e01

  • SHA256

    589bae8f594f4259c0f7c41192939a9d38d693fdc48061ef017ebe311f794b9a

  • SHA512

    a7ed856b6c078216ba23abdabdb585c1cbbe39fd49b20316c766b073c4c46cc4f204fd8863cebbfa26679977d84c4b9a5196e6b11349761ced26e0fba0f50501

  • SSDEEP

    12288:WqX3QwsKoRjtMEztFwpq3vuxcjaRRMItSdgoCYyLEzshAblVv/z+LzmwK82U8Loi:WqHQrBJMEzbwGG9C6JoC4zshaHzkszUe

Score
10/10
discoveryevasionexecutionpersistenceupx

Malware Config

Targets

    • Target

      mara-fix_1.5/Eset Fix.exe

    • Size

      711KB

    • MD5

      5f45b1b2eee537288ab579ba2119a00e

    • SHA1

      b383a82af3b16b0a6259283a6d8dcba373412863

    • SHA256

      8e83308224a56c555b856e82d8e8296966f6339fa89877adf817b13f1ce9f53f

    • SHA512

      4b16bbc9831a6fbfdf6176bbf3f648e51aae82b597d1d5b7242d36789034f71067e87eadaf2a835320dfc4d18772d28ba47d784bc04282d137703bf08bd95068

    • SSDEEP

      12288:TnNhuBoY8SorxgmA+nlvVlkbw5F53Vo7lKZMItwdgcCYILEpshKVlZvFp8pzmSK1:TPatCg7EPibwHjo7lKq63cCEpshK9pas

    Score
    10/10
    discoveryevasionexecutionpersistenceupx

    • Disables service(s)

      evasionexecution

    • Sets service image path in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks