Overview

overview

7

Static

static

3

2d5faff79a...18.exe

windows7-x64

7

2d5faff79a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d5faff79a74b2709535513c2b8258c3_JaffaCakes118

  • Size

    390KB

  • Sample

    241009-jhnbjsvemk

  • MD5

    2d5faff79a74b2709535513c2b8258c3

  • SHA1

    4e654e7b069688608dd8a748c4a38ad68d3220b0

  • SHA256

    f186fd210f23ab13e2c49c54cee1e4399c5eed239fce5a9d67cc37b0495a703a

  • SHA512

    574ccd1e8c401d8e56b350b6d3389f775fcd13c24b1a09ec945035f788ca6ae3a3e297f081969432a7f664b865ebd43facb73a8310dbef418f1e2002fb4c64d6

  • SSDEEP

    6144:bAugtoJ4NHZA3XqW+uTGMPjwTJh8ZkrgLXHuWtjamUvoDojHPUMTjGo3:Rg2J4N16VPjwdh8G+OWhBeoAvZTD

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      2d5faff79a74b2709535513c2b8258c3_JaffaCakes118

    • Size

      390KB

    • MD5

      2d5faff79a74b2709535513c2b8258c3

    • SHA1

      4e654e7b069688608dd8a748c4a38ad68d3220b0

    • SHA256

      f186fd210f23ab13e2c49c54cee1e4399c5eed239fce5a9d67cc37b0495a703a

    • SHA512

      574ccd1e8c401d8e56b350b6d3389f775fcd13c24b1a09ec945035f788ca6ae3a3e297f081969432a7f664b865ebd43facb73a8310dbef418f1e2002fb4c64d6

    • SSDEEP

      6144:bAugtoJ4NHZA3XqW+uTGMPjwTJh8ZkrgLXHuWtjamUvoDojHPUMTjGo3:Rg2J4N16VPjwdh8G+OWhBeoAvZTD

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks