Overview

overview

10

Static

static

7

c07fdbd297...18.exe

windows7-x64

10

c07fdbd297...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c07fdbd297a01ca95d369d30ad6710ed_JaffaCakes118

  • Size

    220KB

  • Sample

    240825-l4bkzszhjm

  • MD5

    c07fdbd297a01ca95d369d30ad6710ed

  • SHA1

    f6aad085efd46c8e0bd12f2e6360026528f7e224

  • SHA256

    0682b8d1f7752da267754492177335e09c7ec49584d25c3635609a1cd11338de

  • SHA512

    6b02d6a38b5f421ca235e385a6b6a74c05728b1d52dffc36699f9616624a59cab8abb45d2188e9b888b70e0d338adf545b3cf4ca74254000ec20e34d39a0dd48

  • SSDEEP

    3072:vHjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1jm0+Jj:Po/BHng5HaVG4G/1z+QVMbg1jv+1

Score
10/10
vobfusdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      c07fdbd297a01ca95d369d30ad6710ed_JaffaCakes118

    • Size

      220KB

    • MD5

      c07fdbd297a01ca95d369d30ad6710ed

    • SHA1

      f6aad085efd46c8e0bd12f2e6360026528f7e224

    • SHA256

      0682b8d1f7752da267754492177335e09c7ec49584d25c3635609a1cd11338de

    • SHA512

      6b02d6a38b5f421ca235e385a6b6a74c05728b1d52dffc36699f9616624a59cab8abb45d2188e9b888b70e0d338adf545b3cf4ca74254000ec20e34d39a0dd48

    • SSDEEP

      3072:vHjk+0oLnWFnzBHv/xWFsg8WatFBGFVWPE5ac0pG/1z+QVMbg1jm0+Jj:Po/BHng5HaVG4G/1z+QVMbg1jv+1

    Score
    10/10
    vobfusdiscoverypersistenceupxworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Adds policy Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks