Overview

overview

7

Static

static

5

03fbd06c8c...18.exe

windows7-x64

7

03fbd06c8c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03fbd06c8c0d407bbdebfff2076d3571_JaffaCakes118

  • Size

    168KB

  • Sample

    241001-chh89szcle

  • MD5

    03fbd06c8c0d407bbdebfff2076d3571

  • SHA1

    ee2d927d4c3003606df08453c8ef264cc87b427d

  • SHA256

    db3cf5060f2a3b387e2dc3ab7cc444c4e6a34de378fc325e4116e28aae29e208

  • SHA512

    81ed5f287a4428da8227f36d2be074df4c25e1be43df4b62d5195bea016181e2ae3a64f1f6430d84fc317ac40bf229230824a5b1ccba66e54ed8a48120d1ee54

  • SSDEEP

    3072:CQFvHWYPM6jKn/+QC8iL/aLTll9ZP8Lcg+LUoFjnwt5jeZUHmHq:CyPM6jU/+TL/aLTl7ZP+cgFoFjn+QqHN

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      03fbd06c8c0d407bbdebfff2076d3571_JaffaCakes118

    • Size

      168KB

    • MD5

      03fbd06c8c0d407bbdebfff2076d3571

    • SHA1

      ee2d927d4c3003606df08453c8ef264cc87b427d

    • SHA256

      db3cf5060f2a3b387e2dc3ab7cc444c4e6a34de378fc325e4116e28aae29e208

    • SHA512

      81ed5f287a4428da8227f36d2be074df4c25e1be43df4b62d5195bea016181e2ae3a64f1f6430d84fc317ac40bf229230824a5b1ccba66e54ed8a48120d1ee54

    • SSDEEP

      3072:CQFvHWYPM6jKn/+QC8iL/aLTll9ZP8Lcg+LUoFjnwt5jeZUHmHq:CyPM6jU/+TL/aLTl7ZP+cgFoFjn+QqHN

    Score
    7/10
    discoverypersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks