Overview

overview

10

Static

static

7

a22cac563d...18.exe

windows7-x64

10

a22cac563d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a22cac563d5a8acf7b0b976fe36a52c8_JaffaCakes118

  • Size

    457KB

  • Sample

    240817-mgc1za1apg

  • MD5

    a22cac563d5a8acf7b0b976fe36a52c8

  • SHA1

    14b1134422ed836d9d922937424fd90d498d6a7c

  • SHA256

    4bf20ea0c2dd3266438570167649c5bb4076da990ffa53aaedd75ff4bdbdaa03

  • SHA512

    2ada36ba1a3b7511baf32f56240002d1a33020f3e01be5c74fb9aec7d33b8747cef756a3710017559d08e6c16c41c0b86976058a3240379e49685b69666480c6

  • SSDEEP

    12288:+mB/46QcgaHRbq9wu8W/3cQGRc3gvLyBX:+mB/41cgPwu8M3YeBX

Score
10/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      a22cac563d5a8acf7b0b976fe36a52c8_JaffaCakes118

    • Size

      457KB

    • MD5

      a22cac563d5a8acf7b0b976fe36a52c8

    • SHA1

      14b1134422ed836d9d922937424fd90d498d6a7c

    • SHA256

      4bf20ea0c2dd3266438570167649c5bb4076da990ffa53aaedd75ff4bdbdaa03

    • SHA512

      2ada36ba1a3b7511baf32f56240002d1a33020f3e01be5c74fb9aec7d33b8747cef756a3710017559d08e6c16c41c0b86976058a3240379e49685b69666480c6

    • SSDEEP

      12288:+mB/46QcgaHRbq9wu8W/3cQGRc3gvLyBX:+mB/41cgPwu8M3YeBX

    Score
    10/10
    discoveryevasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • Adds policy Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks