Overview

overview

7

Static

static

3

fbddb85590...18.exe

windows7-x64

7

fbddb85590...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fbddb8559054a8e04e81cedc75adcdd5_JaffaCakes118

  • Size

    31KB

  • Sample

    240928-j3pecavhkr

  • MD5

    fbddb8559054a8e04e81cedc75adcdd5

  • SHA1

    f3ee535ce7ae53ec2534989fe39013cde557696b

  • SHA256

    f71a215f548d1ecaab5b39d30d6cd8a2db4f6ecf0377834df9e411053d3eec19

  • SHA512

    45a8e04ccbaea72cbe576f9a3ada315d86d524a4169af9c2d7ba48eb0d4fdfb8e1a064dcdbae188de4b3aa5e018a8a9d41fb0c883114e718655924a30473d4f6

  • SSDEEP

    384:hRhvdel8ct1PDcOQDgNRjhnk9Ac4uIw/2XwpHIAZ8wUizXctDXkBocJRUDGGjohZ:belpD4OJflLFuI9nATmDXkUM/4Y

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      fbddb8559054a8e04e81cedc75adcdd5_JaffaCakes118

    • Size

      31KB

    • MD5

      fbddb8559054a8e04e81cedc75adcdd5

    • SHA1

      f3ee535ce7ae53ec2534989fe39013cde557696b

    • SHA256

      f71a215f548d1ecaab5b39d30d6cd8a2db4f6ecf0377834df9e411053d3eec19

    • SHA512

      45a8e04ccbaea72cbe576f9a3ada315d86d524a4169af9c2d7ba48eb0d4fdfb8e1a064dcdbae188de4b3aa5e018a8a9d41fb0c883114e718655924a30473d4f6

    • SSDEEP

      384:hRhvdel8ct1PDcOQDgNRjhnk9Ac4uIw/2XwpHIAZ8wUizXctDXkBocJRUDGGjohZ:belpD4OJflLFuI9nATmDXkUM/4Y

    Score
    7/10
    discoverypersistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks