Overview

overview

10

Static

static

5

120902d5c3...18.exe

windows7-x64

10

120902d5c3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    120902d5c338ec0b0455905ddcb44124_JaffaCakes118

  • Size

    298KB

  • Sample

    241004-f8h8qsxall

  • MD5

    120902d5c338ec0b0455905ddcb44124

  • SHA1

    71a54806200eb0e547e305bd9edaa51f2d05c2dd

  • SHA256

    a0f0a34fbf6aed8db005fa2821a4b91798e50ca6f406ab01cee346db98929558

  • SHA512

    6ac17f5f35a5263b837b664174eedebf55b25c82742ad611c68009f5fef4d412acd2cf00c03263d777e31d4ac3ee42bd3e811822ab51aa124154cd3293e6a4f8

  • SSDEEP

    6144:EuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIY5:v6Wq4aaE6KwyF5L0Y2D1PqLw

Score
10/10
discoveryevasionupx

Malware Config

Targets

    • Target

      120902d5c338ec0b0455905ddcb44124_JaffaCakes118

    • Size

      298KB

    • MD5

      120902d5c338ec0b0455905ddcb44124

    • SHA1

      71a54806200eb0e547e305bd9edaa51f2d05c2dd

    • SHA256

      a0f0a34fbf6aed8db005fa2821a4b91798e50ca6f406ab01cee346db98929558

    • SHA512

      6ac17f5f35a5263b837b664174eedebf55b25c82742ad611c68009f5fef4d412acd2cf00c03263d777e31d4ac3ee42bd3e811822ab51aa124154cd3293e6a4f8

    • SSDEEP

      6144:EuIlWqB+ihabs7Ch9KwyF5LeLodp2D1Mmakda0qLqIY5:v6Wq4aaE6KwyF5L0Y2D1PqLw

    Score
    10/10
    discoveryevasionupx

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks