Overview

overview

10

Static

static

7

ed57e5e938...18.exe

windows7-x64

10

ed57e5e938...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed57e5e938f16e6a04d4e482498fc303_JaffaCakes118

  • Size

    136KB

  • Sample

    240920-lx49qa1bpn

  • MD5

    ed57e5e938f16e6a04d4e482498fc303

  • SHA1

    222295930f82ffc28552a5aca3d536e40038d07e

  • SHA256

    18f659265241559e036c00653d129c4341bc12f1f6993fdd78afa8742c87b233

  • SHA512

    a5890c925f7d1ff3e848d2c0047ff713d101a8c791c73df2e496af58713de45af2392600f75c04a3965b23e5a95320f46be740696582692b5798f19127851209

  • SSDEEP

    1536:AcZL7wYRgRmOzpAdUBV4NF4Lbj1vYfZahU2cPlTx7EYa9YbeG91dPilum:AG7wUgoOzpXKKLefZahU2ax7ERutTm

Score
10/10
discoveryevasionexecutionpersistenceupx

Malware Config

Targets

    • Target

      ed57e5e938f16e6a04d4e482498fc303_JaffaCakes118

    • Size

      136KB

    • MD5

      ed57e5e938f16e6a04d4e482498fc303

    • SHA1

      222295930f82ffc28552a5aca3d536e40038d07e

    • SHA256

      18f659265241559e036c00653d129c4341bc12f1f6993fdd78afa8742c87b233

    • SHA512

      a5890c925f7d1ff3e848d2c0047ff713d101a8c791c73df2e496af58713de45af2392600f75c04a3965b23e5a95320f46be740696582692b5798f19127851209

    • SSDEEP

      1536:AcZL7wYRgRmOzpAdUBV4NF4Lbj1vYfZahU2cPlTx7EYa9YbeG91dPilum:AG7wUgoOzpXKKLefZahU2ax7ERutTm

    Score
    10/10
    discoveryevasionexecutionpersistenceupx

    • Disables service(s)

      evasionexecution

    • Adds policy Run key to start application

      persistence

    • Drops file in Drivers directory

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks