Overview

overview

7

Static

static

3

56c73a82a4...18.exe

windows7-x64

7

56c73a82a4...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    56c73a82a4e897ba6f41893ac5130cf0_JaffaCakes118

  • Size

    410KB

  • Sample

    241018-lwhpbszfra

  • MD5

    56c73a82a4e897ba6f41893ac5130cf0

  • SHA1

    f829b475a6953712536ef45cfa4bcecd2dcf2605

  • SHA256

    17bda9543e753d09445b1639fec8d459870f2c81434d42929df8fc58ca635974

  • SHA512

    0fa17e7f4e4df80d044aecaa5f665b10565eaefe9211fe51caae5d80e7536b91ea50a6737693f2f6809d57c508fab2569d2e655ab4a068d40660e2a335315c02

  • SSDEEP

    12288:uC9F+DdfUzQbnZEU0sByNPPI26voJ5v0:JUVbtBc1Kav

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      56c73a82a4e897ba6f41893ac5130cf0_JaffaCakes118

    • Size

      410KB

    • MD5

      56c73a82a4e897ba6f41893ac5130cf0

    • SHA1

      f829b475a6953712536ef45cfa4bcecd2dcf2605

    • SHA256

      17bda9543e753d09445b1639fec8d459870f2c81434d42929df8fc58ca635974

    • SHA512

      0fa17e7f4e4df80d044aecaa5f665b10565eaefe9211fe51caae5d80e7536b91ea50a6737693f2f6809d57c508fab2569d2e655ab4a068d40660e2a335315c02

    • SSDEEP

      12288:uC9F+DdfUzQbnZEU0sByNPPI26voJ5v0:JUVbtBc1Kav

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks