Overview

overview

8

Static

static

3

d3ee9ec0c1...18.exe

windows7-x64

8

d3ee9ec0c1...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3ee9ec0c1c1c7ced06e4b5dffbf42ae_JaffaCakes118

  • Size

    334KB

  • Sample

    240908-j8p8tsxfrc

  • MD5

    d3ee9ec0c1c1c7ced06e4b5dffbf42ae

  • SHA1

    86086964166da5ed62e5da3945d4b430f8d79cd8

  • SHA256

    96bf1fecb142f8f8a5142a77444d19cc3e74d730524c3390213d15d87085ecb4

  • SHA512

    920bb47fd9ee5e3a2f6cfa44056e2cf82179ec325368f14d1db848707025ff1c2c4745808908580f477d66e4dc828f8990682a402c5caab0cbbd7c39ffa14182

  • SSDEEP

    6144:TVQimJihVcEXaHlzjkatfsi9JnFeRF8mwBG6C0KtIzcf:TVXGQm3l3dlh9REOi0O7f

Score
8/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      d3ee9ec0c1c1c7ced06e4b5dffbf42ae_JaffaCakes118

    • Size

      334KB

    • MD5

      d3ee9ec0c1c1c7ced06e4b5dffbf42ae

    • SHA1

      86086964166da5ed62e5da3945d4b430f8d79cd8

    • SHA256

      96bf1fecb142f8f8a5142a77444d19cc3e74d730524c3390213d15d87085ecb4

    • SHA512

      920bb47fd9ee5e3a2f6cfa44056e2cf82179ec325368f14d1db848707025ff1c2c4745808908580f477d66e4dc828f8990682a402c5caab0cbbd7c39ffa14182

    • SSDEEP

      6144:TVQimJihVcEXaHlzjkatfsi9JnFeRF8mwBG6C0KtIzcf:TVXGQm3l3dlh9REOi0O7f

    Score
    8/10
    discoveryevasionpersistenceupx

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks