Overview

overview

7

Static

static

3

b9a71dcc51...18.exe

windows7-x64

7

b9a71dcc51...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b9a71dcc512dce46b46b5faf626e784d_JaffaCakes118

  • Size

    184KB

  • Sample

    240823-aqy9cawara

  • MD5

    b9a71dcc512dce46b46b5faf626e784d

  • SHA1

    12d4e2da3e8cc3ef09129ac7cf10678293d3cff1

  • SHA256

    f4baaf59c5cf63669d63519e30c84f13f89b597328eedf3e670c12c10a1a8e6a

  • SHA512

    30ce0186f3f7aeadcb4e353e918f43cd459d4e3692a4e28580f034a77e98bf39a59b24108d44721f173b09077f48be706fa222272933404d1d6b6bae68d7001a

  • SSDEEP

    3072:SjeSuZX2SOIP16S8frDLA5htTCly7QgOm6gBro7ussy4EPs+Y7:CeT4g16SqfLA5SwMm6aMissyqr

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      b9a71dcc512dce46b46b5faf626e784d_JaffaCakes118

    • Size

      184KB

    • MD5

      b9a71dcc512dce46b46b5faf626e784d

    • SHA1

      12d4e2da3e8cc3ef09129ac7cf10678293d3cff1

    • SHA256

      f4baaf59c5cf63669d63519e30c84f13f89b597328eedf3e670c12c10a1a8e6a

    • SHA512

      30ce0186f3f7aeadcb4e353e918f43cd459d4e3692a4e28580f034a77e98bf39a59b24108d44721f173b09077f48be706fa222272933404d1d6b6bae68d7001a

    • SSDEEP

      3072:SjeSuZX2SOIP16S8frDLA5htTCly7QgOm6gBro7ussy4EPs+Y7:CeT4g16SqfLA5SwMm6aMissyqr

    Score
    7/10
    discoverypersistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks