Overview

overview

7

Static

static

7

bfd833cf0f...18.exe

windows7-x64

7

bfd833cf0f...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    bfd833cf0feda1ecddf7c3faa7fad48c_JaffaCakes118

  • Size

    237KB

  • Sample

    240825-bqx7qa1alf

  • MD5

    bfd833cf0feda1ecddf7c3faa7fad48c

  • SHA1

    098d1187a0c75063cb3e2026da804651830ce9ad

  • SHA256

    920f33af25787765f64b47d7d096e48cff5b249642cb66fd97386b3f53b8a44b

  • SHA512

    94683310494c38be691e80c107619822a6af3217dfe9870e21e2913a8a5af07848bf407f082fbbf66c2fccd24900db74e4975a02b568aef2f4cd594f9064d5f9

  • SSDEEP

    6144:NwXqvPm/X7bN4ksL7oUeRpgWxPQbp8xg:NwwPyX7bML7Heo1u

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      bfd833cf0feda1ecddf7c3faa7fad48c_JaffaCakes118

    • Size

      237KB

    • MD5

      bfd833cf0feda1ecddf7c3faa7fad48c

    • SHA1

      098d1187a0c75063cb3e2026da804651830ce9ad

    • SHA256

      920f33af25787765f64b47d7d096e48cff5b249642cb66fd97386b3f53b8a44b

    • SHA512

      94683310494c38be691e80c107619822a6af3217dfe9870e21e2913a8a5af07848bf407f082fbbf66c2fccd24900db74e4975a02b568aef2f4cd594f9064d5f9

    • SSDEEP

      6144:NwXqvPm/X7bN4ksL7oUeRpgWxPQbp8xg:NwwPyX7bML7Heo1u

    Score
    7/10
    discoverypersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks