Overview

overview

7

Static

static

7

d22b3df364...18.exe

windows7-x64

7

d22b3df364...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d22b3df36457a17f032833b7b02f0601_JaffaCakes118

  • Size

    352KB

  • Sample

    240907-r11ctsyenn

  • MD5

    d22b3df36457a17f032833b7b02f0601

  • SHA1

    1e7d1b70265d5929ff5e5f58c24f628679eff893

  • SHA256

    f6a110db05d1d3ae9e537921a41dc8e9ad272e266ccb98b0915063e8d06bf5c7

  • SHA512

    ed780042aa9b892dc332d3d6a4fca6c6b360ca0728f87529cec37c4f7f548c7768de1d792fab5c19d339f3f57c9c93cd737959fb68a3e1e8248c29e9998304b2

  • SSDEEP

    3072:L8EU6GdwTYBpL/d8mvgvyybyc8mNwMRjpL/ZJCwMRjpL/thBwMRjpL/vJCwMRjpH:oEtjTq/mmvgV83Qp/9Qp/2Qp/7Qp/Lu0

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      d22b3df36457a17f032833b7b02f0601_JaffaCakes118

    • Size

      352KB

    • MD5

      d22b3df36457a17f032833b7b02f0601

    • SHA1

      1e7d1b70265d5929ff5e5f58c24f628679eff893

    • SHA256

      f6a110db05d1d3ae9e537921a41dc8e9ad272e266ccb98b0915063e8d06bf5c7

    • SHA512

      ed780042aa9b892dc332d3d6a4fca6c6b360ca0728f87529cec37c4f7f548c7768de1d792fab5c19d339f3f57c9c93cd737959fb68a3e1e8248c29e9998304b2

    • SSDEEP

      3072:L8EU6GdwTYBpL/d8mvgvyybyc8mNwMRjpL/ZJCwMRjpL/thBwMRjpL/vJCwMRjpH:oEtjTq/mmvgV83Qp/9Qp/2Qp/7Qp/Lu0

    Score
    7/10
    discoveryupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks