Overview

overview

7

Static

static

3

b30e26146c...18.exe

windows7-x64

7

b30e26146c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b30e26146c43e18548d9c8d30fce8f1b_JaffaCakes118

  • Size

    376KB

  • Sample

    240821-l774cswepk

  • MD5

    b30e26146c43e18548d9c8d30fce8f1b

  • SHA1

    5cd06e834698dbd8b8f18f90bd491b86b447a512

  • SHA256

    fec81241a8c5a1b6767c3a5bfba17a298805eaf6770bf39739ae676c2e358149

  • SHA512

    466f90a1b188b61133f300d930def236675b45e75a55ecd24ed8b7e7cf192adfa96c7fdfe66efff682d197e9f8cb0f5eec2ad58e00ceec3874aaa87baee7b3d9

  • SSDEEP

    6144:ZNi9Rvi9s6J4FMfbz8sr7+AikwkFXK3H5UECu7IU5Z:Hl9sORz8MvbFX8OwZ

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      b30e26146c43e18548d9c8d30fce8f1b_JaffaCakes118

    • Size

      376KB

    • MD5

      b30e26146c43e18548d9c8d30fce8f1b

    • SHA1

      5cd06e834698dbd8b8f18f90bd491b86b447a512

    • SHA256

      fec81241a8c5a1b6767c3a5bfba17a298805eaf6770bf39739ae676c2e358149

    • SHA512

      466f90a1b188b61133f300d930def236675b45e75a55ecd24ed8b7e7cf192adfa96c7fdfe66efff682d197e9f8cb0f5eec2ad58e00ceec3874aaa87baee7b3d9

    • SSDEEP

      6144:ZNi9Rvi9s6J4FMfbz8sr7+AikwkFXK3H5UECu7IU5Z:Hl9sORz8MvbFX8OwZ

    Score
    7/10
    discoveryupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Uses the VBS compiler for execution

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks