Overview

overview

7

Static

static

3

576753067a...18.exe

windows7-x64

7

576753067a...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    576753067aa629a886c78ebf13d9c031_JaffaCakes118

  • Size

    399KB

  • Sample

    241018-ph79lsygnk

  • MD5

    576753067aa629a886c78ebf13d9c031

  • SHA1

    0d326c60372763883b3c4e45c2dbb5691c675322

  • SHA256

    9e422a33e61a4f853e2fef26bec4cf7847eb9e2ba4c9e034d402a8cb7caeb8c8

  • SHA512

    a2d23ba98c74c2c572abc484bf816a9ea05a501d0626a3fab3163daa6a7f08953438a402f8e5e97db7c03c0c50de6f591467593d6f166d1d57fa1fb1be833cf4

  • SSDEEP

    12288:Udu0gH01Ek2HzzDf3jii3tLbofZmKwx6gk:CgHgY6iyhHidk

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      576753067aa629a886c78ebf13d9c031_JaffaCakes118

    • Size

      399KB

    • MD5

      576753067aa629a886c78ebf13d9c031

    • SHA1

      0d326c60372763883b3c4e45c2dbb5691c675322

    • SHA256

      9e422a33e61a4f853e2fef26bec4cf7847eb9e2ba4c9e034d402a8cb7caeb8c8

    • SHA512

      a2d23ba98c74c2c572abc484bf816a9ea05a501d0626a3fab3163daa6a7f08953438a402f8e5e97db7c03c0c50de6f591467593d6f166d1d57fa1fb1be833cf4

    • SSDEEP

      12288:Udu0gH01Ek2HzzDf3jii3tLbofZmKwx6gk:CgHgY6iyhHidk

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks