Overview

overview

7

Static

static

3

fea4fea1b4...18.exe

windows7-x64

7

fea4fea1b4...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fea4fea1b42629ab89f862a15a1935f9_JaffaCakes118

  • Size

    372KB

  • Sample

    240929-qydwdawfnk

  • MD5

    fea4fea1b42629ab89f862a15a1935f9

  • SHA1

    525245fe8d994ddb882f4e8aa084477dcdfc0111

  • SHA256

    9ae229735bb8fd3f180318c5a1eb7869d17e82fd3ff657992dd984469db7b27a

  • SHA512

    f68cd7dcff6e547aa043e78ec1bdedafa641839ceb254fc590a54625a5a7c8aaa5de079baa11e35a2c09f4a26a3682879aca0277d12f0b395a571fced728eba0

  • SSDEEP

    6144:jNHHL9tTZYzz8fmycGI88Vk4IequR+Zl+CL7Iujr2SYE+qhAFu4fD/wDlrK:jNnLDTfmzlEen8ZUCLrr2SYE+2ALDID

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      fea4fea1b42629ab89f862a15a1935f9_JaffaCakes118

    • Size

      372KB

    • MD5

      fea4fea1b42629ab89f862a15a1935f9

    • SHA1

      525245fe8d994ddb882f4e8aa084477dcdfc0111

    • SHA256

      9ae229735bb8fd3f180318c5a1eb7869d17e82fd3ff657992dd984469db7b27a

    • SHA512

      f68cd7dcff6e547aa043e78ec1bdedafa641839ceb254fc590a54625a5a7c8aaa5de079baa11e35a2c09f4a26a3682879aca0277d12f0b395a571fced728eba0

    • SSDEEP

      6144:jNHHL9tTZYzz8fmycGI88Vk4IequR+Zl+CL7Iujr2SYE+qhAFu4fD/wDlrK:jNnLDTfmzlEen8ZUCLrr2SYE+2ALDID

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks