Overview

overview

7

Static

static

3

a46ede73f8...18.exe

windows7-x64

7

a46ede73f8...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a46ede73f8fa845b2af73797fc81c4e7_JaffaCakes118

  • Size

    458KB

  • Sample

    240817-2mxpws1fkb

  • MD5

    a46ede73f8fa845b2af73797fc81c4e7

  • SHA1

    16c43ac597335cc271196173a76442cc10b504a8

  • SHA256

    f11bf699d34929cf6ceeab702037b664352b9d39f78681fc00fcdfbda6ace02d

  • SHA512

    b400150ab3b418dfa8fd124d1e61b90120d138a7b0eaa7e7a135a06efd858961dc8cf4e88434c88296c8db543a259f67c35e08c8b24450f5bc0bc8fe083fcf47

  • SSDEEP

    6144:tQowKO7WrzcKMqcskMBemmkAcP5AkG61RCv/oezzcydcHYAazlI+ECRvA63hvlww:DzrzczLMB7LpGzvXzcsuYAaiCPStu/

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      a46ede73f8fa845b2af73797fc81c4e7_JaffaCakes118

    • Size

      458KB

    • MD5

      a46ede73f8fa845b2af73797fc81c4e7

    • SHA1

      16c43ac597335cc271196173a76442cc10b504a8

    • SHA256

      f11bf699d34929cf6ceeab702037b664352b9d39f78681fc00fcdfbda6ace02d

    • SHA512

      b400150ab3b418dfa8fd124d1e61b90120d138a7b0eaa7e7a135a06efd858961dc8cf4e88434c88296c8db543a259f67c35e08c8b24450f5bc0bc8fe083fcf47

    • SSDEEP

      6144:tQowKO7WrzcKMqcskMBemmkAcP5AkG61RCv/oezzcydcHYAazlI+ECRvA63hvlww:DzrzczLMB7LpGzvXzcsuYAaiCPStu/

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks