Overview

overview

8

Static

static

3

dd3aa0dfb4...18.exe

windows7-x64

8

dd3aa0dfb4...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd3aa0dfb4644938887627691c441ce4_JaffaCakes118

  • Size

    244KB

  • Sample

    240912-3dapfa1cqq

  • MD5

    dd3aa0dfb4644938887627691c441ce4

  • SHA1

    8a1fe36c5ab9c4892c589c6349e0890a29a29b84

  • SHA256

    653df605b6d7409ab26c3fce4b4dfabbaa6b1deb5a6aa18cba54b1dfe2d3f825

  • SHA512

    e4e43e2923de3c6b9020d03349bf70b626d5e719c497c72801cd09f2f4932a2c0dca4d76f7415e4e7306d5b7762373c17c9d69b50860ad1a6676055fd183b898

  • SSDEEP

    3072:zaMSOePHDkUe0mVZLTYNAUnSptxldQIaevadbRS/LKfuEaLeYbnfLk8GuhSi:z4b5elZLFUSLsevadF+KfhzY5b

Score
8/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      dd3aa0dfb4644938887627691c441ce4_JaffaCakes118

    • Size

      244KB

    • MD5

      dd3aa0dfb4644938887627691c441ce4

    • SHA1

      8a1fe36c5ab9c4892c589c6349e0890a29a29b84

    • SHA256

      653df605b6d7409ab26c3fce4b4dfabbaa6b1deb5a6aa18cba54b1dfe2d3f825

    • SHA512

      e4e43e2923de3c6b9020d03349bf70b626d5e719c497c72801cd09f2f4932a2c0dca4d76f7415e4e7306d5b7762373c17c9d69b50860ad1a6676055fd183b898

    • SSDEEP

      3072:zaMSOePHDkUe0mVZLTYNAUnSptxldQIaevadbRS/LKfuEaLeYbnfLk8GuhSi:z4b5elZLFUSLsevadF+KfhzY5b

    Score
    8/10
    discoverypersistenceupx

    • Drops file in Drivers directory

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks