Overview

overview

7

Static

static

3

c161d61742...18.exe

windows7-x64

7

c161d61742...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c161d617423b31a218b2015757ea9039_JaffaCakes118

  • Size

    400KB

  • Sample

    240825-xpzj2s1ekn

  • MD5

    c161d617423b31a218b2015757ea9039

  • SHA1

    3df92ef43d3653f654357629a4e7100347440602

  • SHA256

    5cabbf0bfbde0abfbe831d600ef9f7e974623562bc36ec34b578d3284f41deba

  • SHA512

    dcf87724c0476765610c4fd293ac1a03b91bf7c5169abf1b0f331b267e7760b7100420819b5cd7169d2c24f6f29d1942b70e1d2c8d2a8b18995901071ad277bd

  • SSDEEP

    6144:Z2tAeDyCi0gviwI+aFbZuahAvsY9y+ACwfN7iIDSf71lxBIX7zT:ZCfFgKyaF0aqABefZlxSXvT

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      c161d617423b31a218b2015757ea9039_JaffaCakes118

    • Size

      400KB

    • MD5

      c161d617423b31a218b2015757ea9039

    • SHA1

      3df92ef43d3653f654357629a4e7100347440602

    • SHA256

      5cabbf0bfbde0abfbe831d600ef9f7e974623562bc36ec34b578d3284f41deba

    • SHA512

      dcf87724c0476765610c4fd293ac1a03b91bf7c5169abf1b0f331b267e7760b7100420819b5cd7169d2c24f6f29d1942b70e1d2c8d2a8b18995901071ad277bd

    • SSDEEP

      6144:Z2tAeDyCi0gviwI+aFbZuahAvsY9y+ACwfN7iIDSf71lxBIX7zT:ZCfFgKyaF0aqABefZlxSXvT

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks