Overview

overview

7

Static

static

5

fba1c0875d...18.exe

windows7-x64

7

fba1c0875d...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fba1c0875de4f3e97f2791e724964280_JaffaCakes118

  • Size

    145KB

  • Sample

    240928-gkx8eszepk

  • MD5

    fba1c0875de4f3e97f2791e724964280

  • SHA1

    9421747575807ec9f9143447e4cddd0070252ad4

  • SHA256

    dedf7cf4461454ca15ee6b4a0707b37a13b5f6e41ade77b75f33037f83179795

  • SHA512

    52579793e576e87c2d237a51bcc8640a7d47b95673d89be6a179ba114c8091e8c9c2794b963756b1bc733d9e94b7e2cbd52ed25b9f40727d9ccd72e7e9039e5f

  • SSDEEP

    3072:O4cietLXrbwseUUFM9+FoiySzrVkYo+P1:8/L7sppM9+FoiyS62

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      fba1c0875de4f3e97f2791e724964280_JaffaCakes118

    • Size

      145KB

    • MD5

      fba1c0875de4f3e97f2791e724964280

    • SHA1

      9421747575807ec9f9143447e4cddd0070252ad4

    • SHA256

      dedf7cf4461454ca15ee6b4a0707b37a13b5f6e41ade77b75f33037f83179795

    • SHA512

      52579793e576e87c2d237a51bcc8640a7d47b95673d89be6a179ba114c8091e8c9c2794b963756b1bc733d9e94b7e2cbd52ed25b9f40727d9ccd72e7e9039e5f

    • SSDEEP

      3072:O4cietLXrbwseUUFM9+FoiySzrVkYo+P1:8/L7sppM9+FoiyS62

    Score
    7/10
    discoverypersistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks