Overview

overview

10

Static

static

5

JaffaCakes...3f.exe

windows7-x64

10

JaffaCakes...3f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_132cb6ccbe20c89fc7216b7072bfb33f

  • Size

    5.7MB

  • Sample

    241231-l1n2xaxndl

  • MD5

    132cb6ccbe20c89fc7216b7072bfb33f

  • SHA1

    bce08640b253d85e8942bcb26a28681dc875ff20

  • SHA256

    ade7ff4a6290971c5e6f5cc6cf4020f66db4c8f08ed6d44a36cba1d61bf352c4

  • SHA512

    dbc3f555729f616c1a298780e7e6fc212e411737de1d74e72692efcea0a44a9c409d6112fee3659c065b6c77208ff37e5e52d1ee5ebf080d97cb4dd234f83496

  • SSDEEP

    98304:VbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbF:P

Score
10/10
vobfusdiscoverypersistenceupxworm

Malware Config

Targets

    • Target

      JaffaCakes118_132cb6ccbe20c89fc7216b7072bfb33f

    • Size

      5.7MB

    • MD5

      132cb6ccbe20c89fc7216b7072bfb33f

    • SHA1

      bce08640b253d85e8942bcb26a28681dc875ff20

    • SHA256

      ade7ff4a6290971c5e6f5cc6cf4020f66db4c8f08ed6d44a36cba1d61bf352c4

    • SHA512

      dbc3f555729f616c1a298780e7e6fc212e411737de1d74e72692efcea0a44a9c409d6112fee3659c065b6c77208ff37e5e52d1ee5ebf080d97cb4dd234f83496

    • SSDEEP

      98304:VbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbF:P

    Score
    10/10
    vobfusdiscoverypersistenceupxworm

    • Vobfus

      A widespread worm which spreads via network drives and removable media.

      wormvobfus

    • Vobfus family

      vobfus

    • Adds policy Run key to start application

      persistence

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks