Overview

overview

7

Static

static

3

12d3eb466b...18.exe

windows7-x64

7

12d3eb466b...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    12d3eb466b8afb43e5cc653a5c2a2c2c_JaffaCakes118

  • Size

    702KB

  • Sample

    241004-lrkm5a1fqa

  • MD5

    12d3eb466b8afb43e5cc653a5c2a2c2c

  • SHA1

    4373f5f7929c834fa889ade1a71ca5e71c44fc10

  • SHA256

    b486731ff88fc1ab1bf0d0fdfde714348c225468fd78b5f219a66f6bbb5af88e

  • SHA512

    44af960cc6776cf246c7bfb3338470ac1f9213eac2f036b25c4a096b32cb4984350f671389e535eb5f95df8b1fcc2c0e568e6f71a3cf6240899761f3356fa5b5

  • SSDEEP

    12288:zGOHAYFikVlXZx8V8TyY5xbR3I1jy6b6vpzW4+iEZ:K2brL88yY5xbRcG6bczW4+iA

Score
7/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      12d3eb466b8afb43e5cc653a5c2a2c2c_JaffaCakes118

    • Size

      702KB

    • MD5

      12d3eb466b8afb43e5cc653a5c2a2c2c

    • SHA1

      4373f5f7929c834fa889ade1a71ca5e71c44fc10

    • SHA256

      b486731ff88fc1ab1bf0d0fdfde714348c225468fd78b5f219a66f6bbb5af88e

    • SHA512

      44af960cc6776cf246c7bfb3338470ac1f9213eac2f036b25c4a096b32cb4984350f671389e535eb5f95df8b1fcc2c0e568e6f71a3cf6240899761f3356fa5b5

    • SSDEEP

      12288:zGOHAYFikVlXZx8V8TyY5xbR3I1jy6b6vpzW4+iEZ:K2brL88yY5xbRcG6bczW4+iA

    Score
    7/10
    defense_evasiondiscoverypersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Impair Defenses: Safe Mode Boot

      defense_evasion

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks