Overview

overview

7

Static

static

7

b0e9c53480...18.exe

windows7-x64

7

b0e9c53480...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0e9c53480d8de488e2b0284ee25eca9_JaffaCakes118

  • Size

    231KB

  • Sample

    240820-1dcspayapp

  • MD5

    b0e9c53480d8de488e2b0284ee25eca9

  • SHA1

    a1b9b0a94d93fcebc44ce81312c1ea77ac4db588

  • SHA256

    a5a0016ad3ec514474bebc90d49f40095870723b112d1878dfc16173eef9a0e2

  • SHA512

    a815a2b4cf7ad52ba8619f1ec0b94b1b2a35f811c0868a502a29271e2db40a7b708ccc71727af4b7e87ccf70e48eb89daca217a59e97e43bff56a05bee72ac39

  • SSDEEP

    3072:WaljkuxzrQMV46d/u48NOusseWopayA7j3iPFRjW5wIEcYr:WtuBp46pu46Grpan3iPFs5wIY

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      b0e9c53480d8de488e2b0284ee25eca9_JaffaCakes118

    • Size

      231KB

    • MD5

      b0e9c53480d8de488e2b0284ee25eca9

    • SHA1

      a1b9b0a94d93fcebc44ce81312c1ea77ac4db588

    • SHA256

      a5a0016ad3ec514474bebc90d49f40095870723b112d1878dfc16173eef9a0e2

    • SHA512

      a815a2b4cf7ad52ba8619f1ec0b94b1b2a35f811c0868a502a29271e2db40a7b708ccc71727af4b7e87ccf70e48eb89daca217a59e97e43bff56a05bee72ac39

    • SSDEEP

      3072:WaljkuxzrQMV46d/u48NOusseWopayA7j3iPFRjW5wIEcYr:WtuBp46pu46Grpan3iPFs5wIY

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks