Overview

overview

7

Static

static

7

bad8dfa3d5...18.exe

windows7-x64

7

bad8dfa3d5...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    bad8dfa3d57a781b8f58107a5a795812_JaffaCakes118

  • Size

    40KB

  • Sample

    240823-jb1nasthmq

  • MD5

    bad8dfa3d57a781b8f58107a5a795812

  • SHA1

    b44cfbdedc99cfcf4e8f0723e0810683decb6664

  • SHA256

    41ae9947b93b2afdcdaa250c3e6237282f9fe13f7f89eafd840d32f0da3f997b

  • SHA512

    37be6adf3b4122da8fcbd2e9cfe27787285d76a6a5d819b88b59a19e38d8e38ea45e4427109ab8f5a4eaa5bef2acfe68e78eac976ad99db14ef2097a97bcf02e

  • SSDEEP

    768:6jZFvysxt2WIu3o0DrYvlEQiWb/axOJ4A:67vdPo0DrYdYQS0J

Score
7/10
defense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      bad8dfa3d57a781b8f58107a5a795812_JaffaCakes118

    • Size

      40KB

    • MD5

      bad8dfa3d57a781b8f58107a5a795812

    • SHA1

      b44cfbdedc99cfcf4e8f0723e0810683decb6664

    • SHA256

      41ae9947b93b2afdcdaa250c3e6237282f9fe13f7f89eafd840d32f0da3f997b

    • SHA512

      37be6adf3b4122da8fcbd2e9cfe27787285d76a6a5d819b88b59a19e38d8e38ea45e4427109ab8f5a4eaa5bef2acfe68e78eac976ad99db14ef2097a97bcf02e

    • SSDEEP

      768:6jZFvysxt2WIu3o0DrYvlEQiWb/axOJ4A:67vdPo0DrYdYQS0J

    Score
    7/10
    defense_evasiondiscoveryupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks