Overview

overview

8

Static

static

7

a053bb2d76...18.exe

windows7-x64

8

a053bb2d76...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a053bb2d76bfdd0ad1a6421fb40eff80_JaffaCakes118

  • Size

    53KB

  • Sample

    240816-282kzawhpr

  • MD5

    a053bb2d76bfdd0ad1a6421fb40eff80

  • SHA1

    c44215c59d23e12beede88a7c247b9ff5fc50600

  • SHA256

    cccc15661d94554a2a1c377551b5acba72faeb1a418fc705497b7d33e2b0090e

  • SHA512

    d9b560807ee63345955cbaed0d744fb51eb8db9954813bda45d14e222a4a036d08e9232efdfc7f0d9d514263cf7f0759e38174b05e6e4444591a3863b3e1ca92

  • SSDEEP

    768:DYN4bNdGrmTTZ4z3mAp7U4Z2smG7z1/m8IyC+c+TU7cEvob:jymTTZimAKY2MB/Tj/M9vob

Score
8/10
discoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      a053bb2d76bfdd0ad1a6421fb40eff80_JaffaCakes118

    • Size

      53KB

    • MD5

      a053bb2d76bfdd0ad1a6421fb40eff80

    • SHA1

      c44215c59d23e12beede88a7c247b9ff5fc50600

    • SHA256

      cccc15661d94554a2a1c377551b5acba72faeb1a418fc705497b7d33e2b0090e

    • SHA512

      d9b560807ee63345955cbaed0d744fb51eb8db9954813bda45d14e222a4a036d08e9232efdfc7f0d9d514263cf7f0759e38174b05e6e4444591a3863b3e1ca92

    • SSDEEP

      768:DYN4bNdGrmTTZ4z3mAp7U4Z2smG7z1/m8IyC+c+TU7cEvob:jymTTZimAKY2MB/Tj/M9vob

    Score
    8/10
    persistenceprivilege_escalationupxdiscovery

    • Event Triggered Execution: AppCert DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppCert DLLs loaded into processes.

      persistenceprivilege_escalation

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks