Overview

overview

7

Static

static

3

005edc4075...18.exe

windows7-x64

7

005edc4075...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    005edc4075150565b61f49f5c538fd28_JaffaCakes118

  • Size

    272KB

  • Sample

    240930-j93wbavdlq

  • MD5

    005edc4075150565b61f49f5c538fd28

  • SHA1

    0fa89afc8a830e49b82a501f83597d9e16ee03c8

  • SHA256

    808abbf5f4a9afc6b71d7458acc2422863e7a23d55de03124a923286fb077443

  • SHA512

    be4011b1b33f303959d1c2efacc9834c83e317d3e8753cd4af85ae9e37d57482206cb70b2ea4cedcc5598de29541a86c5f9eabbcd8d06e75d8c905a47fabad3f

  • SSDEEP

    6144:dOiINQIext3vCoHQgvl6JlhG9lClKuuP4m8Pezk6fK1i5W3+m:U6IK3vCcQ8OG9xP4m8Pezk6JSL

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      005edc4075150565b61f49f5c538fd28_JaffaCakes118

    • Size

      272KB

    • MD5

      005edc4075150565b61f49f5c538fd28

    • SHA1

      0fa89afc8a830e49b82a501f83597d9e16ee03c8

    • SHA256

      808abbf5f4a9afc6b71d7458acc2422863e7a23d55de03124a923286fb077443

    • SHA512

      be4011b1b33f303959d1c2efacc9834c83e317d3e8753cd4af85ae9e37d57482206cb70b2ea4cedcc5598de29541a86c5f9eabbcd8d06e75d8c905a47fabad3f

    • SSDEEP

      6144:dOiINQIext3vCoHQgvl6JlhG9lClKuuP4m8Pezk6fK1i5W3+m:U6IK3vCcQ8OG9xP4m8Pezk6JSL

    Score
    7/10
    discoverypersistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks