Overview

overview

7

Static

static

5

fe10852ebe...18.exe

windows7-x64

7

fe10852ebe...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fe10852ebef567fb74d56ed921764ded_JaffaCakes118

  • Size

    297KB

  • Sample

    240929-jfayfaxfme

  • MD5

    fe10852ebef567fb74d56ed921764ded

  • SHA1

    70fe6f2a67b7c66c4c9243ea6bb89c7725f821e4

  • SHA256

    173dd7c6a70c7a5f4a05cd4fbd86aa55a0458839c4b90b3e81ea051df259c8ac

  • SHA512

    ce6d7f47c2a0214cb19aeb554de2fb1bc32876f4def64c2b894da0bad338c328d1f71c9771d436644408de724cb0618099f884fcd59658df162f91edf80f9039

  • SSDEEP

    6144:ErJ0n+pwK3IjFZH6LlJ73taIDjQDwTgsBxsuZgP4t8DcO0twoS:ErJ0niwK386j3taYjmw9B6ggP4KcO0ts

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      fe10852ebef567fb74d56ed921764ded_JaffaCakes118

    • Size

      297KB

    • MD5

      fe10852ebef567fb74d56ed921764ded

    • SHA1

      70fe6f2a67b7c66c4c9243ea6bb89c7725f821e4

    • SHA256

      173dd7c6a70c7a5f4a05cd4fbd86aa55a0458839c4b90b3e81ea051df259c8ac

    • SHA512

      ce6d7f47c2a0214cb19aeb554de2fb1bc32876f4def64c2b894da0bad338c328d1f71c9771d436644408de724cb0618099f884fcd59658df162f91edf80f9039

    • SSDEEP

      6144:ErJ0n+pwK3IjFZH6LlJ73taIDjQDwTgsBxsuZgP4t8DcO0twoS:ErJ0niwK386j3taYjmw9B6ggP4KcO0ts

    Score
    7/10
    discoveryupx

    • Deletes itself

    • Executes dropped EXE

    • Program crash

    • Suspicious use of SetThreadContext

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks