Overview

overview

10

Static

static

5

f65fe83d55...18.exe

windows7-x64

10

f65fe83d55...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f65fe83d55f29415346a8115ec47b3a1_JaffaCakes118

  • Size

    55KB

  • Sample

    240925-tlk1psvall

  • MD5

    f65fe83d55f29415346a8115ec47b3a1

  • SHA1

    cfadccb33cb957c1b5f45899a0c69957d4c537c5

  • SHA256

    d20e377a5911c995dd9671b86305fbef58b4154853cdeabe452959b6f8228eac

  • SHA512

    055ad7daa898603af9c3cb50fecf9ebba8983918293526adcd2f2a9661430321b6f0642165bc237bbb3bb1e6f1420515249c6d98f6f6ad4f13912b074dc7333b

  • SSDEEP

    768:b89nQi095lFWjD35ajBjIE5aWgNvopa4GeCI9G7vNYqWnQrVHsLq/NNd3OY62:b0u0D38T5aWgNKzn3G7vvWnQeLqFr3z

Score
10/10
discoveryevasionexecutionpersistencetrojanupx

Malware Config

Targets

    • Target

      f65fe83d55f29415346a8115ec47b3a1_JaffaCakes118

    • Size

      55KB

    • MD5

      f65fe83d55f29415346a8115ec47b3a1

    • SHA1

      cfadccb33cb957c1b5f45899a0c69957d4c537c5

    • SHA256

      d20e377a5911c995dd9671b86305fbef58b4154853cdeabe452959b6f8228eac

    • SHA512

      055ad7daa898603af9c3cb50fecf9ebba8983918293526adcd2f2a9661430321b6f0642165bc237bbb3bb1e6f1420515249c6d98f6f6ad4f13912b074dc7333b

    • SSDEEP

      768:b89nQi095lFWjD35ajBjIE5aWgNvopa4GeCI9G7vNYqWnQrVHsLq/NNd3OY62:b0u0D38T5aWgNKzn3G7vvWnQeLqFr3z

    Score
    10/10
    discoveryevasionexecutionpersistencetrojanupx

    • Disables service(s)

      evasionexecution

    • Drops file in Drivers directory

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks