Overview

overview

9

Static

static

7

b2e4bba698...18.exe

windows7-x64

9

b2e4bba698...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2e4bba6987023d19a2edd1bd5171ec4_JaffaCakes118

  • Size

    446KB

  • Sample

    240821-k6x2bszgla

  • MD5

    b2e4bba6987023d19a2edd1bd5171ec4

  • SHA1

    f07385d5e9ff0f0c003eb4408ddf513895c83952

  • SHA256

    a01e054ed975802925a72a6036e35b7e5104bd03f55c01b98eb47b7a6e81d4e1

  • SHA512

    5faac529aeb1fd7c216ad5529951b434fa49ae8bb2e757af2da413ebb64daf85eeb0d833461a0fe673e86c46dfd0b8c096a534273fe57478647af7fa83e8ac44

  • SSDEEP

    6144:GAMuWvSQevdWlGZJY/NYeNjQ2E1490q8OAoQO1xSnfChhpj7X71b2YtXRicN:HWKQ0dWRQ2D9jpxxkfUnj/thtXRx

Score
9/10
discoveryevasionupx

Malware Config

Targets

    • Target

      b2e4bba6987023d19a2edd1bd5171ec4_JaffaCakes118

    • Size

      446KB

    • MD5

      b2e4bba6987023d19a2edd1bd5171ec4

    • SHA1

      f07385d5e9ff0f0c003eb4408ddf513895c83952

    • SHA256

      a01e054ed975802925a72a6036e35b7e5104bd03f55c01b98eb47b7a6e81d4e1

    • SHA512

      5faac529aeb1fd7c216ad5529951b434fa49ae8bb2e757af2da413ebb64daf85eeb0d833461a0fe673e86c46dfd0b8c096a534273fe57478647af7fa83e8ac44

    • SSDEEP

      6144:GAMuWvSQevdWlGZJY/NYeNjQ2E1490q8OAoQO1xSnfChhpj7X71b2YtXRicN:HWKQ0dWRQ2D9jpxxkfUnj/thtXRx

    Score
    9/10
    discoveryevasionupx

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Drops file in Drivers directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks