Overview

overview

10

Static

static

3

de1388a919...18.exe

windows7-x64

10

de1388a919...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    de1388a919744ce917e7f0103680fd5e_JaffaCakes118

  • Size

    276KB

  • Sample

    240913-kma3fsvckf

  • MD5

    de1388a919744ce917e7f0103680fd5e

  • SHA1

    d6c6d43cd45dd9748937f9450107d38fa7ab5edf

  • SHA256

    d62485200a7488c19a480d7bb85a6bc47bbffe1730e999cec9a9fc9b0c72c377

  • SHA512

    c58952fe9fb596a26cc968a06e82c1a8643415de92652fd468570032bbf37e2171fdff86eb756cc6ade18199bb46fc06effe88d222bfac57279778ce1b5dff6b

  • SSDEEP

    6144:Jn5gKKO3ShaY/ozXgWRscsBTf9ei14BuOvzWOY:15gKbS/oHmTfrMuOvzrY

Score
10/10
discoveryevasionupx

Malware Config

Targets

    • Target

      de1388a919744ce917e7f0103680fd5e_JaffaCakes118

    • Size

      276KB

    • MD5

      de1388a919744ce917e7f0103680fd5e

    • SHA1

      d6c6d43cd45dd9748937f9450107d38fa7ab5edf

    • SHA256

      d62485200a7488c19a480d7bb85a6bc47bbffe1730e999cec9a9fc9b0c72c377

    • SHA512

      c58952fe9fb596a26cc968a06e82c1a8643415de92652fd468570032bbf37e2171fdff86eb756cc6ade18199bb46fc06effe88d222bfac57279778ce1b5dff6b

    • SSDEEP

      6144:Jn5gKKO3ShaY/ozXgWRscsBTf9ei14BuOvzWOY:15gKbS/oHmTfrMuOvzrY

    Score
    10/10
    discoveryevasionupx

    • Modifies firewall policy service

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks