Overview

overview

8

Static

static

7

c17eb80126...18.exe

windows7-x64

8

c17eb80126...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c17eb8012622bc6484c9d3f1892df21c_JaffaCakes118

  • Size

    35KB

  • Sample

    240825-y3ktgssgmf

  • MD5

    c17eb8012622bc6484c9d3f1892df21c

  • SHA1

    754632a10c36271066408136f1dae37a2d693614

  • SHA256

    7fc8b05f35185716825a349d99790da00a6cfb3f2b99f26a176e9215d2a2b618

  • SHA512

    40e66d2e3b4d7536a367878428dfd088de82d1cd2b42b3e374d26bd9a652fa01ac55016488fdfe44508d1bbb3017b458b0d27ba04bdc5e358efe03d1eb1c9ca4

  • SSDEEP

    768:JcBmmsFEHSc5yBjQOThq2zjD929kyfzSIRIuqNHfMoOP3:JcBmmsFlQwhxjHyIZ/

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      c17eb8012622bc6484c9d3f1892df21c_JaffaCakes118

    • Size

      35KB

    • MD5

      c17eb8012622bc6484c9d3f1892df21c

    • SHA1

      754632a10c36271066408136f1dae37a2d693614

    • SHA256

      7fc8b05f35185716825a349d99790da00a6cfb3f2b99f26a176e9215d2a2b618

    • SHA512

      40e66d2e3b4d7536a367878428dfd088de82d1cd2b42b3e374d26bd9a652fa01ac55016488fdfe44508d1bbb3017b458b0d27ba04bdc5e358efe03d1eb1c9ca4

    • SSDEEP

      768:JcBmmsFEHSc5yBjQOThq2zjD929kyfzSIRIuqNHfMoOP3:JcBmmsFlQwhxjHyIZ/

    Score
    8/10
    discoverypersistenceupx

    • Drops file in Drivers directory

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks