Overview

overview

8

Static

static

3

d5219afb76...18.exe

windows7-x64

8

d5219afb76...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d5219afb76549771fa5bbf20245fdee4_JaffaCakes118

  • Size

    332KB

  • Sample

    240908-1hr36sygna

  • MD5

    d5219afb76549771fa5bbf20245fdee4

  • SHA1

    a5ba2ccaf729466f0c7500c8605f53c4b2dc954a

  • SHA256

    48e242e9dd88d33a25542a55afac8f31c2c31d1bcbf6b493b3377c3a13ae8cf7

  • SHA512

    6d4f264b3fee9c56c4b1c594c406af2d801e362add1929f27d1bf92bb16a31ad47a0c30e23e77416c6563fbe6d614775bf3a62d779ca52daf731d89f4d88c934

  • SSDEEP

    6144:TVL5RDU7+yU1S4H+EtYGbHgWt5l/9Oty+7VEucls4O3Ua43UCo:TVL5xU73Uk4Y+HT3t8tyPPls4BaD

Score
8/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      d5219afb76549771fa5bbf20245fdee4_JaffaCakes118

    • Size

      332KB

    • MD5

      d5219afb76549771fa5bbf20245fdee4

    • SHA1

      a5ba2ccaf729466f0c7500c8605f53c4b2dc954a

    • SHA256

      48e242e9dd88d33a25542a55afac8f31c2c31d1bcbf6b493b3377c3a13ae8cf7

    • SHA512

      6d4f264b3fee9c56c4b1c594c406af2d801e362add1929f27d1bf92bb16a31ad47a0c30e23e77416c6563fbe6d614775bf3a62d779ca52daf731d89f4d88c934

    • SSDEEP

      6144:TVL5RDU7+yU1S4H+EtYGbHgWt5l/9Oty+7VEucls4O3Ua43UCo:TVL5xU73Uk4Y+HT3t8tyPPls4BaD

    Score
    8/10
    discoveryevasionpersistenceupx

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks