Overview

overview

7

Static

static

3

a51907d57b...18.exe

windows7-x64

7

a51907d57b...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a51907d57b11cb7bdf0a37b7d8a1ad92_JaffaCakes118

  • Size

    403KB

  • Sample

    240818-db288s1epa

  • MD5

    a51907d57b11cb7bdf0a37b7d8a1ad92

  • SHA1

    e710de478dfa4751dd4fb30c71e8227174abcb73

  • SHA256

    6c4450d14cb4393d32c042b64519372d42111a463cee41515c478ecf81b66484

  • SHA512

    d8841b611f124bb7c35354bbe784c3b0a2746c82a694d83fcb88ec741dd39965b58c1ffb20f833a1cca904547516f0401ec071b3c500cbe48b8b52d9e6331b30

  • SSDEEP

    6144:OjkyTI7+CDcSdjPNON7MpACKEgKDUn6via2noLUoiiNr2QFG7r:SkysDf1OpMpNDvKaXooii12Qqr

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      a51907d57b11cb7bdf0a37b7d8a1ad92_JaffaCakes118

    • Size

      403KB

    • MD5

      a51907d57b11cb7bdf0a37b7d8a1ad92

    • SHA1

      e710de478dfa4751dd4fb30c71e8227174abcb73

    • SHA256

      6c4450d14cb4393d32c042b64519372d42111a463cee41515c478ecf81b66484

    • SHA512

      d8841b611f124bb7c35354bbe784c3b0a2746c82a694d83fcb88ec741dd39965b58c1ffb20f833a1cca904547516f0401ec071b3c500cbe48b8b52d9e6331b30

    • SSDEEP

      6144:OjkyTI7+CDcSdjPNON7MpACKEgKDUn6via2noLUoiiNr2QFG7r:SkysDf1OpMpNDvKaXooii12Qqr

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks