Overview

overview

7

Static

static

3

db32182356...18.exe

windows7-x64

7

db32182356...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    db32182356dffc7844d268e1dee3f3e7_JaffaCakes118

  • Size

    396KB

  • Sample

    240911-znlmxascmr

  • MD5

    db32182356dffc7844d268e1dee3f3e7

  • SHA1

    4f4cfd25bd52cfe8275b99fd97e82645e5f3e68a

  • SHA256

    3d001a628737c55f10bbc096dad153199583589d4cc1821b2b0f83b86282f22d

  • SHA512

    7ae239e68eef229fec0d1e289dc7be4afd1207c10fd1fa675e71eae1bcff2ea938ef253feaf2eabba38cc5cd638e5266951075160a1916f059266443fdbf4254

  • SSDEEP

    6144:7bmh6yiHaEDVOsBmm3ZstWLCPmP2KxakjUTLHG3YON9c20LW3:RyYaEDIOmm3ydmPNExHG3YOLc20q3

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      db32182356dffc7844d268e1dee3f3e7_JaffaCakes118

    • Size

      396KB

    • MD5

      db32182356dffc7844d268e1dee3f3e7

    • SHA1

      4f4cfd25bd52cfe8275b99fd97e82645e5f3e68a

    • SHA256

      3d001a628737c55f10bbc096dad153199583589d4cc1821b2b0f83b86282f22d

    • SHA512

      7ae239e68eef229fec0d1e289dc7be4afd1207c10fd1fa675e71eae1bcff2ea938ef253feaf2eabba38cc5cd638e5266951075160a1916f059266443fdbf4254

    • SSDEEP

      6144:7bmh6yiHaEDVOsBmm3ZstWLCPmP2KxakjUTLHG3YON9c20LW3:RyYaEDIOmm3ydmPNExHG3YOLc20q3

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks