f6ba64804a93056a389efeee30bdb2f07eb7eeb3b37f67e0e44194031a807475 | Triage

Submit
Reports

Overview

overview

Static

static

7

c81449fbaa...18.exe

windows7-x64

c81449fbaa...18.exe

windows10-2004-x64

7

Sharing

General

Target

c81449fbaa7500d967256858abf593f1_JaffaCakes118
Size

27KB
Sample

240829-c1vd9azbnc
MD5

c81449fbaa7500d967256858abf593f1
SHA1

3f860503c4077c984a8f0a2c6fd25eaee36b6593
SHA256

f6ba64804a93056a389efeee30bdb2f07eb7eeb3b37f67e0e44194031a807475
SHA512

0c677c15a147b5b1970c54eb88f27c6169f9f94142ef13c31057dbed730634b9d37efdaffd54bbc79f826abf1c64e56c83d07b4a18c85e4215a160ae9aff94bf
SSDEEP

768:ufSuDhpUy2w7i9nhFbdYJzf98aV+tKphjTq23gsQq23gsaq23gsj:tuDb2w7i5XO9RoeOAX

Score

10^/10

discovery evasion upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

c81449fbaa7500d967256858abf593f1_JaffaCakes118.exe

Resource

win7-20240704-en

discovery evasion upx

windows7-x64

4 signatures

150 seconds

Behavioral task

behavioral2

Sample

c81449fbaa7500d967256858abf593f1_JaffaCakes118.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  c81449fbaa7500d967256858abf593f1_JaffaCakes118
- Size
  
  27KB
- MD5
  
  c81449fbaa7500d967256858abf593f1
- SHA1
  
  3f860503c4077c984a8f0a2c6fd25eaee36b6593
- SHA256
  
  f6ba64804a93056a389efeee30bdb2f07eb7eeb3b37f67e0e44194031a807475
- SHA512
  
  0c677c15a147b5b1970c54eb88f27c6169f9f94142ef13c31057dbed730634b9d37efdaffd54bbc79f826abf1c64e56c83d07b4a18c85e4215a160ae9aff94bf
- SSDEEP
  
  768:ufSuDhpUy2w7i9nhFbdYJzf98aV+tKphjTq23gsQq23gsaq23gsj:tuDb2w7i5XO9RoeOAX
Score

10^/10

discovery evasion upx
- Modifies firewall policy service
  evasion
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionupx

behavioral2

© 2018-2024

Terms | Privacy