Overview

overview

7

Static

static

7

c2007d73e5...18.exe

windows7-x64

7

c2007d73e5...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c2007d73e57fefd1745e0133840e4276_JaffaCakes118

  • Size

    190KB

  • Sample

    240826-br4e5axarf

  • MD5

    c2007d73e57fefd1745e0133840e4276

  • SHA1

    9b2a47aefa3e3e33bc9b10e50c2f803763b3629d

  • SHA256

    f787b83712bd0c7bceccb2a6271968506da424ad8d0e9783494ff04c391430a5

  • SHA512

    e11e82d37ad617ace2e69ed6f519cd632fe134a97c0949804ea7deeb57dfda8b935ff8268efdfedad10b7f44f27f453f2cc8b01d98b8a2fe74c4683198f291e2

  • SSDEEP

    3072:59UUz0AcFW93YABUKVfeu9iUaaVY7xWeoTinEHogcIa++HhVPbkYWIO6CP5l6aRU:AtHW93YABLDnzY7xWB1od7VQnF6CG8F+

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      c2007d73e57fefd1745e0133840e4276_JaffaCakes118

    • Size

      190KB

    • MD5

      c2007d73e57fefd1745e0133840e4276

    • SHA1

      9b2a47aefa3e3e33bc9b10e50c2f803763b3629d

    • SHA256

      f787b83712bd0c7bceccb2a6271968506da424ad8d0e9783494ff04c391430a5

    • SHA512

      e11e82d37ad617ace2e69ed6f519cd632fe134a97c0949804ea7deeb57dfda8b935ff8268efdfedad10b7f44f27f453f2cc8b01d98b8a2fe74c4683198f291e2

    • SSDEEP

      3072:59UUz0AcFW93YABUKVfeu9iUaaVY7xWeoTinEHogcIa++HhVPbkYWIO6CP5l6aRU:AtHW93YABLDnzY7xWB1od7VQnF6CG8F+

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks