Overview

overview

7

Static

static

3

ff4f1b293e...18.exe

windows7-x64

7

ff4f1b293e...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff4f1b293e5fff7b6701f42ff3f968bb_JaffaCakes118

  • Size

    3.2MB

  • Sample

    240929-zlc8razdjj

  • MD5

    ff4f1b293e5fff7b6701f42ff3f968bb

  • SHA1

    1bd8b3923650db524e3488f3a5061e646179a6e9

  • SHA256

    0eacc3c6dda47aa11c67f6d5fd53cc20e62ae993f74a7322977931277d94322e

  • SHA512

    092c646950abca33fd2162b4e6c6a5d93a1225a0f7014aeb206e974a994e8352f4c3c862b1950d1f00fb277c9ecb922c81a32b2600906c45ef3ea5e77fa1230f

  • SSDEEP

    49152:zwzbYsjUOourg1FUgaM68PRqGvx+1Gp6CbutHx+TGzMvZTIoe:szMsjUOouk1FUgx4Gvx+httg6zMvZi

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      ff4f1b293e5fff7b6701f42ff3f968bb_JaffaCakes118

    • Size

      3.2MB

    • MD5

      ff4f1b293e5fff7b6701f42ff3f968bb

    • SHA1

      1bd8b3923650db524e3488f3a5061e646179a6e9

    • SHA256

      0eacc3c6dda47aa11c67f6d5fd53cc20e62ae993f74a7322977931277d94322e

    • SHA512

      092c646950abca33fd2162b4e6c6a5d93a1225a0f7014aeb206e974a994e8352f4c3c862b1950d1f00fb277c9ecb922c81a32b2600906c45ef3ea5e77fa1230f

    • SSDEEP

      49152:zwzbYsjUOourg1FUgaM68PRqGvx+1Gp6CbutHx+TGzMvZTIoe:szMsjUOouk1FUgx4Gvx+httg6zMvZi

    Score
    7/10
    discoveryupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks