Overview

overview

10

Static

static

5

0fe251a4c4...18.exe

windows7-x64

10

0fe251a4c4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fe251a4c428039d33892fdeb8859cad_JaffaCakes118

  • Size

    298KB

  • Sample

    241003-v6qx5a1erf

  • MD5

    0fe251a4c428039d33892fdeb8859cad

  • SHA1

    f3c673e7e09e5cd0fe8dbdb7878e80949d4d6751

  • SHA256

    d8b6a44499528f97b52095e410da5fe06b00b0d1a1d9606d7e136965abffb99b

  • SHA512

    e46e18537b5893d82debf5b6af21369480a1812c72287c591b0029023dd3735be61114675ca7ee59799377da5028eaec5854caeccb7771f80ea0aa7a42beda38

  • SSDEEP

    6144:EuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIY4:v6Wq4aaE6KwyF5L0Y2D1PqLl

Score
10/10
discoveryevasionupx

Malware Config

Targets

    • Target

      0fe251a4c428039d33892fdeb8859cad_JaffaCakes118

    • Size

      298KB

    • MD5

      0fe251a4c428039d33892fdeb8859cad

    • SHA1

      f3c673e7e09e5cd0fe8dbdb7878e80949d4d6751

    • SHA256

      d8b6a44499528f97b52095e410da5fe06b00b0d1a1d9606d7e136965abffb99b

    • SHA512

      e46e18537b5893d82debf5b6af21369480a1812c72287c591b0029023dd3735be61114675ca7ee59799377da5028eaec5854caeccb7771f80ea0aa7a42beda38

    • SSDEEP

      6144:EuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIY4:v6Wq4aaE6KwyF5L0Y2D1PqLl

    Score
    10/10
    discoveryevasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks