b48ddae4ed2ce374ef45207b020197c1e8b2ca0ff75cf1c3e1bf846e67f8df5f | Triage

Submit
Reports

Overview

overview

Static

static

5

04a83c4366...18.exe

windows7-x64

04a83c4366...18.exe

windows10-2004-x64

Sharing

General

Target

04a83c436644186a0c4a66ee4704c2bf_JaffaCakes118
Size

61KB
Sample

241001-gz6hcavckj
MD5

04a83c436644186a0c4a66ee4704c2bf
SHA1

2d1634bdb85ae682d5070e87c0d55847f6fe9a11
SHA256

b48ddae4ed2ce374ef45207b020197c1e8b2ca0ff75cf1c3e1bf846e67f8df5f
SHA512

6287f0f2f6b20f8328d2d2d38e8d5a7e14b8c076a73dc3b9fc9b0f10d106bb37ba164f0e2999274b2dd649eea32cf0b7e9a253b6b3b59e61a1ff75326ba1c982
SSDEEP

1536:bhKkynfDuTK1e0ySeOLKCJnLrdO7zLm+KmIey:okybuL+efCJnLJO7HmlWy

Score

10^/10

discovery evasion execution persistence trojan upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

04a83c436644186a0c4a66ee4704c2bf_JaffaCakes118.exe

Resource

win7-20240903-en

discovery evasion execution persistence trojan upx

windows7-x64

18 signatures

150 seconds

Behavioral task

behavioral2

Sample

04a83c436644186a0c4a66ee4704c2bf_JaffaCakes118.exe

Resource

win10v2004-20240802-en

discovery evasion execution persistence trojan upx

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  04a83c436644186a0c4a66ee4704c2bf_JaffaCakes118
- Size
  
  61KB
- MD5
  
  04a83c436644186a0c4a66ee4704c2bf
- SHA1
  
  2d1634bdb85ae682d5070e87c0d55847f6fe9a11
- SHA256
  
  b48ddae4ed2ce374ef45207b020197c1e8b2ca0ff75cf1c3e1bf846e67f8df5f
- SHA512
  
  6287f0f2f6b20f8328d2d2d38e8d5a7e14b8c076a73dc3b9fc9b0f10d106bb37ba164f0e2999274b2dd649eea32cf0b7e9a253b6b3b59e61a1ff75326ba1c982
- SSDEEP
  
  1536:bhKkynfDuTK1e0ySeOLKCJnLrdO7zLm+KmIey:okybuL+efCJnLJO7HmlWy
Score

10^/10

discovery evasion execution persistence trojan upx
- Disables service(s)
  evasion execution
- Drops file in Drivers directory
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

Service Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

Tasks

static1

behavioral1

discoveryevasionexecutionpersistencetrojanupx

behavioral2

discoveryevasionexecutionpersistencetrojanupx

© 2018-2025

Terms | Privacy