Overview

overview

7

Static

static

5

281230a8fc...18.exe

windows7-x64

7

281230a8fc...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    281230a8fc38c72e779eef689043c84d_JaffaCakes118

  • Size

    456KB

  • Sample

    241009-ba1b5swclk

  • MD5

    281230a8fc38c72e779eef689043c84d

  • SHA1

    c1185bc14e605639d6d8bac84387fef61ca8bce2

  • SHA256

    ab8eb898ffde4b234e057fdab6663a4a9a1b0450a68e2a69d21f0e60b40c375c

  • SHA512

    470b6e3b1034b5ecd400a7797e4bed34743ee11f4f85e09c560522f5dfd469494aa26d5d23054b2cff17ca72d179422b93edfca0bb63487d6060eb64f525fafd

  • SSDEEP

    12288:jMK/HSIv1RyfY2qBkfCo85hMVmpzf1Ygz:jMIyIv1RShmkW5/Bf13z

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      281230a8fc38c72e779eef689043c84d_JaffaCakes118

    • Size

      456KB

    • MD5

      281230a8fc38c72e779eef689043c84d

    • SHA1

      c1185bc14e605639d6d8bac84387fef61ca8bce2

    • SHA256

      ab8eb898ffde4b234e057fdab6663a4a9a1b0450a68e2a69d21f0e60b40c375c

    • SHA512

      470b6e3b1034b5ecd400a7797e4bed34743ee11f4f85e09c560522f5dfd469494aa26d5d23054b2cff17ca72d179422b93edfca0bb63487d6060eb64f525fafd

    • SSDEEP

      12288:jMK/HSIv1RyfY2qBkfCo85hMVmpzf1Ygz:jMIyIv1RShmkW5/Bf13z

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks