Overview

overview

7

Static

static

3

f6521cb71d...18.exe

windows7-x64

7

f6521cb71d...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6521cb71dda082388d92ff7ba85eeb5_JaffaCakes118

  • Size

    418KB

  • Sample

    240925-s1dphatamn

  • MD5

    f6521cb71dda082388d92ff7ba85eeb5

  • SHA1

    8f0fcca1636c3a48bc79fe1d3aee271006ec49c4

  • SHA256

    1a41930c190b7f8040503fd9865de9d07929bef93d84b339a9b174a43d0a74e0

  • SHA512

    5fb6c8ff30daffd63a0696a795dcff74ff57fa7071000553b7be72163187c3060a35bf057923252e619a8559215b1c034576b2b33f3ab89a38ef0e84b406eeb3

  • SSDEEP

    6144:x1LDhBEUQ2G7E+udcoPv5n68ucAIRRNSoNbh9tjyqhDzyBkfTT9MQrFbF4mp:x1fhtQYh6VcASRNSUt9QifTT2QrP4

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      f6521cb71dda082388d92ff7ba85eeb5_JaffaCakes118

    • Size

      418KB

    • MD5

      f6521cb71dda082388d92ff7ba85eeb5

    • SHA1

      8f0fcca1636c3a48bc79fe1d3aee271006ec49c4

    • SHA256

      1a41930c190b7f8040503fd9865de9d07929bef93d84b339a9b174a43d0a74e0

    • SHA512

      5fb6c8ff30daffd63a0696a795dcff74ff57fa7071000553b7be72163187c3060a35bf057923252e619a8559215b1c034576b2b33f3ab89a38ef0e84b406eeb3

    • SSDEEP

      6144:x1LDhBEUQ2G7E+udcoPv5n68ucAIRRNSoNbh9tjyqhDzyBkfTT9MQrFbF4mp:x1fhtQYh6VcASRNSUt9QifTT2QrP4

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks