Overview

overview

7

Static

static

7

cfc71cd7a8...18.exe

windows7-x64

7

cfc71cd7a8...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cfc71cd7a846d377d08bc1753dffb9a8_JaffaCakes118

  • Size

    25KB

  • Sample

    240906-r3y8jssfld

  • MD5

    cfc71cd7a846d377d08bc1753dffb9a8

  • SHA1

    fda5e298f01b782fe6f8ca5bc1aa1e87f713b0ab

  • SHA256

    b217101f356a5d5595807f78f8e1ae24393007c71a1d26867ef5e7bc4016df0c

  • SHA512

    6b1226bcdbd6cf77ee3e3c9ac7fc35d442a7ad5c03a1dced5a10aa0158d43af7fbb287b750b4aed831d26122cf904f41ae89f282e457a4e332bf4e07d757f630

  • SSDEEP

    384:no5M3aRzZI+Iq5hdMBm6mMhiqeNd6iVLY4VId8A888XD6a4wcLULCQomgfE9ylQ:CzZHJ5hdQm6mzqeNlNE4DuLLGjoP

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      cfc71cd7a846d377d08bc1753dffb9a8_JaffaCakes118

    • Size

      25KB

    • MD5

      cfc71cd7a846d377d08bc1753dffb9a8

    • SHA1

      fda5e298f01b782fe6f8ca5bc1aa1e87f713b0ab

    • SHA256

      b217101f356a5d5595807f78f8e1ae24393007c71a1d26867ef5e7bc4016df0c

    • SHA512

      6b1226bcdbd6cf77ee3e3c9ac7fc35d442a7ad5c03a1dced5a10aa0158d43af7fbb287b750b4aed831d26122cf904f41ae89f282e457a4e332bf4e07d757f630

    • SSDEEP

      384:no5M3aRzZI+Iq5hdMBm6mMhiqeNd6iVLY4VId8A888XD6a4wcLULCQomgfE9ylQ:CzZHJ5hdQm6mzqeNlNE4DuLLGjoP

    Score
    7/10
    discoveryupx

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks