432d9fbf7c68caf68fce7f533e3d00a2876a1e99bce4168a4946766a8dd4e93e | Triage

Submit
Reports

Overview

overview

Static

static

5

17b4cacaa2...18.exe

windows7-x64

17b4cacaa2...18.exe

windows10-2004-x64

Sharing

General

Target

17b4cacaa258654d10cbf083d0d3c350_JaffaCakes118
Size

20KB
Sample

241006-mfcc2stbmc
MD5

17b4cacaa258654d10cbf083d0d3c350
SHA1

7cb87f63202cde1e18deb0f7d18e8083c9ec2225
SHA256

432d9fbf7c68caf68fce7f533e3d00a2876a1e99bce4168a4946766a8dd4e93e
SHA512

c35b9908dc136fe280a1979c3e4dc956c15ec929fbcb6bbd2a3cd707d048a7880d2db96e0df12213f44552ad0f84930e47112732e154cbee8a341d15f88d3efd
SSDEEP

384:g58AcUoUQKNRYELxQUHDvmk3E+KDvB77777J77c77c77c72qh5eZEKup9Ebir:g5BOFKksO1mE9B77777J77c77c77c71b

Score

10^/10

discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

17b4cacaa258654d10cbf083d0d3c350_JaffaCakes118.exe

Resource

win7-20240903-en

discovery persistence upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

17b4cacaa258654d10cbf083d0d3c350_JaffaCakes118.exe

Resource

win10v2004-20240802-en

discovery persistence upx

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  17b4cacaa258654d10cbf083d0d3c350_JaffaCakes118
- Size
  
  20KB
- MD5
  
  17b4cacaa258654d10cbf083d0d3c350
- SHA1
  
  7cb87f63202cde1e18deb0f7d18e8083c9ec2225
- SHA256
  
  432d9fbf7c68caf68fce7f533e3d00a2876a1e99bce4168a4946766a8dd4e93e
- SHA512
  
  c35b9908dc136fe280a1979c3e4dc956c15ec929fbcb6bbd2a3cd707d048a7880d2db96e0df12213f44552ad0f84930e47112732e154cbee8a341d15f88d3efd
- SSDEEP
  
  384:g58AcUoUQKNRYELxQUHDvmk3E+KDvB77777J77c77c77c72qh5eZEKup9Ebir:g5BOFKksO1mE9B77777J77c77c77c71b
Score

10^/10

discovery persistence upx
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Adds Run key to start application
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceupx

behavioral2

discoverypersistenceupx

© 2018-2025

Terms | Privacy