Overview

overview

7

Static

static

3

b9c1d8e647...18.exe

windows7-x64

7

b9c1d8e647...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b9c1d8e6473efda7f31abfe01c15f003_JaffaCakes118

  • Size

    380KB

  • Sample

    240823-be85vazcnm

  • MD5

    b9c1d8e6473efda7f31abfe01c15f003

  • SHA1

    d506cf24918bd7eec3e2e39c370fdcd99afddd2d

  • SHA256

    b69a47f06329b9b3f2834cb62338d78a440ef24de416116fb3894974421daff9

  • SHA512

    23762a06e905eb7f62004d9e19d88274ded1a273aafcadec4ef102110e0e0c916568678e90eca320ef2801f437b39df5d0298837a67aae66629bccf2eafb32fe

  • SSDEEP

    6144:Gbmk5nYYTn8UtENhBqr2oTSZ1DMUnqbcwwkJEEigJtoFAGFTNrwAfz0HAnukzqsu:Gb55Y6nFtEngr2o2zAbpybg8FAG1d1L+

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      b9c1d8e6473efda7f31abfe01c15f003_JaffaCakes118

    • Size

      380KB

    • MD5

      b9c1d8e6473efda7f31abfe01c15f003

    • SHA1

      d506cf24918bd7eec3e2e39c370fdcd99afddd2d

    • SHA256

      b69a47f06329b9b3f2834cb62338d78a440ef24de416116fb3894974421daff9

    • SHA512

      23762a06e905eb7f62004d9e19d88274ded1a273aafcadec4ef102110e0e0c916568678e90eca320ef2801f437b39df5d0298837a67aae66629bccf2eafb32fe

    • SSDEEP

      6144:Gbmk5nYYTn8UtENhBqr2oTSZ1DMUnqbcwwkJEEigJtoFAGFTNrwAfz0HAnukzqsu:Gb55Y6nFtEngr2o2zAbpybg8FAG1d1L+

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks