Overview

overview

7

Static

static

3

ac263c9fff...18.exe

windows7-x64

7

ac263c9fff...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ac263c9fff95ff1446acdde71bd6c6e4_JaffaCakes118

  • Size

    525KB

  • Sample

    240819-xerfpazelg

  • MD5

    ac263c9fff95ff1446acdde71bd6c6e4

  • SHA1

    ada5882cf04d9718dc9caaf265b52dd588ec6b20

  • SHA256

    29d93416cb9becd50ba7e3ebce135d75acb18860b977ea163fdcd96f62fa28d7

  • SHA512

    ec5d47d69f76d7e02065ebc8dcaea858676e8eace9dd79d13b1f97e435b919c05d33e1017b4c552b6f5285e05d0f55cb74fead215ede94ef0fc7f9e0ec553a63

  • SSDEEP

    12288:AocPXu3OgwuKgMhNnubX9Rqmb9FV0O7GsuOTkHukk+uJNv0:Ave3FMa7Dqm9FV/Kdbrav

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      ac263c9fff95ff1446acdde71bd6c6e4_JaffaCakes118

    • Size

      525KB

    • MD5

      ac263c9fff95ff1446acdde71bd6c6e4

    • SHA1

      ada5882cf04d9718dc9caaf265b52dd588ec6b20

    • SHA256

      29d93416cb9becd50ba7e3ebce135d75acb18860b977ea163fdcd96f62fa28d7

    • SHA512

      ec5d47d69f76d7e02065ebc8dcaea858676e8eace9dd79d13b1f97e435b919c05d33e1017b4c552b6f5285e05d0f55cb74fead215ede94ef0fc7f9e0ec553a63

    • SSDEEP

      12288:AocPXu3OgwuKgMhNnubX9Rqmb9FV0O7GsuOTkHukk+uJNv0:Ave3FMa7Dqm9FV/Kdbrav

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks