Overview

overview

7

Static

static

7

ab95847d19...18.exe

windows7-x64

7

ab95847d19...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ab95847d196cdf43bb261b5322c114c2_JaffaCakes118

  • Size

    84KB

  • Sample

    240819-s2167awcqp

  • MD5

    ab95847d196cdf43bb261b5322c114c2

  • SHA1

    1bd924962e84c8c9454d7ebfd2bc87982d8eeb8c

  • SHA256

    6a5b2527e84cc86001fb4519312c5f506de9665a5a3889b10bd9cf5678947385

  • SHA512

    0819a9856015f70d19536f63c699fd6fab57ca05a3f5b42a0a5566f5aa0ab3ee8f7fb843781e40cebc36aa98015b11ee9d4e61d8a731128bc7c3b552eb5b8114

  • SSDEEP

    1536:k8gdMcWehYQcwIf2TKaXm0sZ9V2RcKmUHl7IeOv+2g73oiPU:kPWhQcwc2Wa2rCvmolMeOWFJ

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      ab95847d196cdf43bb261b5322c114c2_JaffaCakes118

    • Size

      84KB

    • MD5

      ab95847d196cdf43bb261b5322c114c2

    • SHA1

      1bd924962e84c8c9454d7ebfd2bc87982d8eeb8c

    • SHA256

      6a5b2527e84cc86001fb4519312c5f506de9665a5a3889b10bd9cf5678947385

    • SHA512

      0819a9856015f70d19536f63c699fd6fab57ca05a3f5b42a0a5566f5aa0ab3ee8f7fb843781e40cebc36aa98015b11ee9d4e61d8a731128bc7c3b552eb5b8114

    • SSDEEP

      1536:k8gdMcWehYQcwIf2TKaXm0sZ9V2RcKmUHl7IeOv+2g73oiPU:kPWhQcwc2Wa2rCvmolMeOWFJ

    Score
    7/10
    discoverypersistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks