Overview

overview

7

Static

static

5

10057b7ab7...18.exe

windows7-x64

7

10057b7ab7...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    10057b7ab7615e203c9798df19125a8b_JaffaCakes118

  • Size

    785KB

  • Sample

    241003-wtdygasgqf

  • MD5

    10057b7ab7615e203c9798df19125a8b

  • SHA1

    6b71d2739b1dedbefac05b0c067166798d1f0e08

  • SHA256

    9109bf9d928cc948f472406e3320e92b5bc01eb7183051dd7f93d4e4e91d29fc

  • SHA512

    3160761c9b4f29563e6a05ce3601c3a4fafc0e8e4a098c29a802d24db05176d245bd9beddc883a716751cdc15c962c8a9c146012ea170b818b8e0942220d77ec

  • SSDEEP

    12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjeg:r5sJo6YrFUiyAak11Ltjeg

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      10057b7ab7615e203c9798df19125a8b_JaffaCakes118

    • Size

      785KB

    • MD5

      10057b7ab7615e203c9798df19125a8b

    • SHA1

      6b71d2739b1dedbefac05b0c067166798d1f0e08

    • SHA256

      9109bf9d928cc948f472406e3320e92b5bc01eb7183051dd7f93d4e4e91d29fc

    • SHA512

      3160761c9b4f29563e6a05ce3601c3a4fafc0e8e4a098c29a802d24db05176d245bd9beddc883a716751cdc15c962c8a9c146012ea170b818b8e0942220d77ec

    • SSDEEP

      12288:rbpHYUKy5U1bo9t8DMRSW9vbciUiLuAvOxMt11i27Qitjeg:r5sJo6YrFUiyAak11Ltjeg

    Score
    7/10
    discoverypersistenceupx

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks