6201340c5a5e75c3ffe5b7fe909e71b098203f1e767d990fd245385a14a30c2c | Triage

Submit
Reports

Overview

overview

8

Static

static

7

ea0ad97bcd...18.exe

windows7-x64

8

ea0ad97bcd...18.exe

windows10-2004-x64

8

Sharing

General

Target

ea0ad97bcd9d63f7f0f70dfcc4f9f1e5_JaffaCakes118
Size

73KB
Sample

240918-1vk6dsvhqm
MD5

ea0ad97bcd9d63f7f0f70dfcc4f9f1e5
SHA1

8d28548444c5fe83c41ae3e7269f85c242e7fcea
SHA256

6201340c5a5e75c3ffe5b7fe909e71b098203f1e767d990fd245385a14a30c2c
SHA512

4f8e559afa4d9e3eb0e3e32dc6061a3a0ffae4783463bb3eb93c99c1e134ab706f41fbd62228472e35d3b8d378596560811f942f1a77df17382d8b2c2b6d4883
SSDEEP

1536:3LGSRWpw/q5d9xN6wx7recmyuMghbBO9gsvIc08H46FPD6JxEPf0cvDLHnAgqL59:7B8ay5xUwRecmyudhbBjsv108YmPDLVQ

Score

8^/10

discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

ea0ad97bcd9d63f7f0f70dfcc4f9f1e5_JaffaCakes118.exe

Resource

win7-20240704-en

discovery persistence upx

windows7-x64

9 signatures

150 seconds

Behavioral task

behavioral2

Sample

ea0ad97bcd9d63f7f0f70dfcc4f9f1e5_JaffaCakes118.exe

Resource

win10v2004-20240802-en

discovery persistence upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  ea0ad97bcd9d63f7f0f70dfcc4f9f1e5_JaffaCakes118
- Size
  
  73KB
- MD5
  
  ea0ad97bcd9d63f7f0f70dfcc4f9f1e5
- SHA1
  
  8d28548444c5fe83c41ae3e7269f85c242e7fcea
- SHA256
  
  6201340c5a5e75c3ffe5b7fe909e71b098203f1e767d990fd245385a14a30c2c
- SHA512
  
  4f8e559afa4d9e3eb0e3e32dc6061a3a0ffae4783463bb3eb93c99c1e134ab706f41fbd62228472e35d3b8d378596560811f942f1a77df17382d8b2c2b6d4883
- SSDEEP
  
  1536:3LGSRWpw/q5d9xN6wx7recmyuMghbBO9gsvIc08H46FPD6JxEPf0cvDLHnAgqL59:7B8ay5xUwRecmyudhbBjsv108YmPDLVQ
Score

8^/10

discovery persistence upx
- Event Triggered Execution: Image File Execution Options Injection
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Image File Execution Options Injection

Privilege Escalation

Event Triggered Execution

Image File Execution Options Injection

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx

© 2018-2024

Terms | Privacy