Overview

overview

10

Static

static

7

b5dccc7bff...18.exe

windows7-x64

10

b5dccc7bff...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b5dccc7bffe65a8bb391edd730f87f81_JaffaCakes118

  • Size

    122KB

  • Sample

    240822-b3qy6ssarb

  • MD5

    b5dccc7bffe65a8bb391edd730f87f81

  • SHA1

    fa70fbe68dd2f83a7999710c35cbc881b1dd0166

  • SHA256

    7a3b90cd671ecc45d551f5eae116654b2c2473f76ef34c94b5aa388eac6d58a4

  • SHA512

    3ac300cffc1941ea5374a471017c7b44e7ab0164df40619c04b8cbe9eaf6cedcc365809ef6338fad777e6db00d31a871ccf9fb0d57a36b5d33163248f39f99f4

  • SSDEEP

    3072:ntArIFMJHhUicQHIo77dlHZyf1egcVCGkfrhOTh:ntYI0UicUBUrc9srh

Score
10/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      b5dccc7bffe65a8bb391edd730f87f81_JaffaCakes118

    • Size

      122KB

    • MD5

      b5dccc7bffe65a8bb391edd730f87f81

    • SHA1

      fa70fbe68dd2f83a7999710c35cbc881b1dd0166

    • SHA256

      7a3b90cd671ecc45d551f5eae116654b2c2473f76ef34c94b5aa388eac6d58a4

    • SHA512

      3ac300cffc1941ea5374a471017c7b44e7ab0164df40619c04b8cbe9eaf6cedcc365809ef6338fad777e6db00d31a871ccf9fb0d57a36b5d33163248f39f99f4

    • SSDEEP

      3072:ntArIFMJHhUicQHIo77dlHZyf1egcVCGkfrhOTh:ntYI0UicUBUrc9srh

    Score
    10/10
    discoveryevasionpersistenceupx

    • Modifies firewall policy service

      evasion

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks