Overview

overview

7

Static

static

3

d3f52c87d5...18.exe

windows7-x64

7

d3f52c87d5...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3f52c87d598db16707d184fac059e30_JaffaCakes118

  • Size

    440KB

  • Sample

    240908-kg6xyawdkp

  • MD5

    d3f52c87d598db16707d184fac059e30

  • SHA1

    3f6aa5b62f09e905de83321681a9321d11355179

  • SHA256

    0bdd89dbc2754f064e0b4cca36b94c8e31141eed2543b9000afa793792a7204f

  • SHA512

    c10308914547d923f1ff11ab260003478ffae8a65877237fa0d05e2ef26138eaf7a862282de4ebf1561be62c22c1cbe8867c0f4466befd37a786dead1425d8dd

  • SSDEEP

    12288:tse5MyRRWOQHMLtkbqvo9n45M6GFyMUC7dvaJphIVFQlLKK:tPrbCSlU45M6OxUC79gp6VFIKK

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      d3f52c87d598db16707d184fac059e30_JaffaCakes118

    • Size

      440KB

    • MD5

      d3f52c87d598db16707d184fac059e30

    • SHA1

      3f6aa5b62f09e905de83321681a9321d11355179

    • SHA256

      0bdd89dbc2754f064e0b4cca36b94c8e31141eed2543b9000afa793792a7204f

    • SHA512

      c10308914547d923f1ff11ab260003478ffae8a65877237fa0d05e2ef26138eaf7a862282de4ebf1561be62c22c1cbe8867c0f4466befd37a786dead1425d8dd

    • SSDEEP

      12288:tse5MyRRWOQHMLtkbqvo9n45M6GFyMUC7dvaJphIVFQlLKK:tPrbCSlU45M6OxUC79gp6VFIKK

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks