Overview

overview

9

Static

static

3

e0aa53d3f1...18.exe

windows7-x64

9

e0aa53d3f1...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0aa53d3f1c28f9a10f57c799421a8b2_JaffaCakes118

  • Size

    3.3MB

  • Sample

    240914-vy6nlswaql

  • MD5

    e0aa53d3f1c28f9a10f57c799421a8b2

  • SHA1

    bde6c378d9582a20cc4593f34f0cd7f563486f75

  • SHA256

    10d18cbc5b56bc8da6a2590ef2027217b99995004a7df4d1bcc65d8953042a25

  • SHA512

    b79ad05ec64cd1b48b598f91d0eb004daf3f940072e30432a8c25bf30c3bd473f5b0d25e1c88930ab6622e7cc038f9ac9e4795a042621976642b51e1a21ee80f

  • SSDEEP

    49152:9zay6DOIuBRVKG4UtONVsz/gMHUU5x+DeJ00LvOW84eZxg/7HxZ86wUeDp:9zXsOIurUG4YONe7HUAx+SJ9GWqgLKR

Score
9/10
discoveryevasionupx

Malware Config

Targets

    • Target

      e0aa53d3f1c28f9a10f57c799421a8b2_JaffaCakes118

    • Size

      3.3MB

    • MD5

      e0aa53d3f1c28f9a10f57c799421a8b2

    • SHA1

      bde6c378d9582a20cc4593f34f0cd7f563486f75

    • SHA256

      10d18cbc5b56bc8da6a2590ef2027217b99995004a7df4d1bcc65d8953042a25

    • SHA512

      b79ad05ec64cd1b48b598f91d0eb004daf3f940072e30432a8c25bf30c3bd473f5b0d25e1c88930ab6622e7cc038f9ac9e4795a042621976642b51e1a21ee80f

    • SSDEEP

      49152:9zay6DOIuBRVKG4UtONVsz/gMHUU5x+DeJ00LvOW84eZxg/7HxZ86wUeDp:9zXsOIurUG4YONe7HUAx+SJ9GWqgLKR

    Score
    9/10
    discoveryevasionupx

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks