Overview

overview

7

Static

static

5

f5b9bbcf51...18.exe

windows7-x64

7

f5b9bbcf51...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5b9bbcf5107435ae3846a90d5da53e4_JaffaCakes118

  • Size

    474KB

  • Sample

    240925-lnrl9s1fld

  • MD5

    f5b9bbcf5107435ae3846a90d5da53e4

  • SHA1

    e9fed4289676cf94797cb2a59f4ad271c266cca2

  • SHA256

    cb2a1ebf1662d88fb72bc34c0dddc895ac48690c342dd5801796f69fe5abdcde

  • SHA512

    83921296b30a7ba04609f1b6ee8e4d6fb59126c150135209237ba9f29c7696b682236d81c2db224c6e50d2105301f7a16fb936dfca1cc8ecc3b5fac752aaf8a8

  • SSDEEP

    12288:rYWqapwli5TLFYZ/irfR2q9eZdQmdW9A8TyrsCr1amRLoS:k3ap/LiZKrReZdQCWq8W4QR

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      f5b9bbcf5107435ae3846a90d5da53e4_JaffaCakes118

    • Size

      474KB

    • MD5

      f5b9bbcf5107435ae3846a90d5da53e4

    • SHA1

      e9fed4289676cf94797cb2a59f4ad271c266cca2

    • SHA256

      cb2a1ebf1662d88fb72bc34c0dddc895ac48690c342dd5801796f69fe5abdcde

    • SHA512

      83921296b30a7ba04609f1b6ee8e4d6fb59126c150135209237ba9f29c7696b682236d81c2db224c6e50d2105301f7a16fb936dfca1cc8ecc3b5fac752aaf8a8

    • SSDEEP

      12288:rYWqapwli5TLFYZ/irfR2q9eZdQmdW9A8TyrsCr1amRLoS:k3ap/LiZKrReZdQCWq8W4QR

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks