Overview

overview

10

Static

static

7

c073dc1327...18.exe

windows7-x64

10

c073dc1327...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c073dc13278b3563542b80888b490e8f_JaffaCakes118

  • Size

    200KB

  • Sample

    240825-lks1xsxbrf

  • MD5

    c073dc13278b3563542b80888b490e8f

  • SHA1

    1d6a54bf2ff1818931dcdc4235a4ada8247fc43d

  • SHA256

    078a4f6d1fc7ab17969f46111b4c9062ab54f21b214c7d2520b371f75be2ccf2

  • SHA512

    a4fde107254e3bbfb3c38ca7c0f25c5e2287a415fff2a6b0030c77304331c456f07eaec408363fd220ad38334976e4b76c03c9ebd457328f60574fa0605b23ea

  • SSDEEP

    6144:Ysui+5LM8X2TosROoVtW7vhOuw/TPhoS:YsGS1VtW7vhOuw/7hoS

Score
10/10
discoveryevasionexecutionpersistenceupx

Malware Config

Targets

    • Target

      c073dc13278b3563542b80888b490e8f_JaffaCakes118

    • Size

      200KB

    • MD5

      c073dc13278b3563542b80888b490e8f

    • SHA1

      1d6a54bf2ff1818931dcdc4235a4ada8247fc43d

    • SHA256

      078a4f6d1fc7ab17969f46111b4c9062ab54f21b214c7d2520b371f75be2ccf2

    • SHA512

      a4fde107254e3bbfb3c38ca7c0f25c5e2287a415fff2a6b0030c77304331c456f07eaec408363fd220ad38334976e4b76c03c9ebd457328f60574fa0605b23ea

    • SSDEEP

      6144:Ysui+5LM8X2TosROoVtW7vhOuw/TPhoS:YsGS1VtW7vhOuw/7hoS

    Score
    10/10
    discoveryevasionexecutionpersistenceupx

    • Disables service(s)

      evasionexecution

    • Adds policy Run key to start application

      persistence

    • Drops file in Drivers directory

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks