Overview

overview

7

Static

static

3

b7a24c99ab...18.exe

windows7-x64

7

b7a24c99ab...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b7a24c99ab32b12bcb23b5de203d329d_JaffaCakes118

  • Size

    435KB

  • Sample

    240822-pmywqsxakg

  • MD5

    b7a24c99ab32b12bcb23b5de203d329d

  • SHA1

    03449cc5f6564a02e6e76f036169faa7e2939623

  • SHA256

    37fe1d172f3daa3d6a02608b8537c3991616e8a131f89063bac061da60d870ec

  • SHA512

    35c32300d4fe8bca9385ba6287c083a3a2e5d6cc498764208b9f703ea7c41fbf9f8200ae508c7bb03e46ea3e0b63b977f53e06ce5878b062be4815173427ece7

  • SSDEEP

    6144:RyH+ZNxpXYAWtxTpbu7V5L3QGJgUnR+ZMMNHteWl4eX6sX0YDZ9ibUJjWnd7lHST:3xpIAWtthujQGaUYZMA5jXhZ46Wdpyh

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      b7a24c99ab32b12bcb23b5de203d329d_JaffaCakes118

    • Size

      435KB

    • MD5

      b7a24c99ab32b12bcb23b5de203d329d

    • SHA1

      03449cc5f6564a02e6e76f036169faa7e2939623

    • SHA256

      37fe1d172f3daa3d6a02608b8537c3991616e8a131f89063bac061da60d870ec

    • SHA512

      35c32300d4fe8bca9385ba6287c083a3a2e5d6cc498764208b9f703ea7c41fbf9f8200ae508c7bb03e46ea3e0b63b977f53e06ce5878b062be4815173427ece7

    • SSDEEP

      6144:RyH+ZNxpXYAWtxTpbu7V5L3QGJgUnR+ZMMNHteWl4eX6sX0YDZ9ibUJjWnd7lHST:3xpIAWtthujQGaUYZMA5jXhZ46Wdpyh

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks