Overview

overview

7

Static

static

3

JaffaCakes...25.exe

windows7-x64

7

JaffaCakes...25.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_f9f96ce631b7e442af90334a7d362525

  • Size

    271KB

  • Sample

    250111-hlecdazjft

  • MD5

    f9f96ce631b7e442af90334a7d362525

  • SHA1

    cd687a557f710552222989713a93316a5657adf4

  • SHA256

    c40d4bea682186b7adf6828f71685c7039719a343f2c48f1240fab3f442a2b4f

  • SHA512

    66558a64a9d86f47b9c753e69e161184f449d840179b1becdb23b0fab4fe9cace7e0e3b48404740a8bb4530f8a82b96ab39855df02585dd4003e5cfa3baef60e

  • SSDEEP

    6144:q+FNvDu5NMsd+mF9gNMrhsgRx2aHNs8DtD1SpUx+:lFxDAdMmF94KZJ+L

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      JaffaCakes118_f9f96ce631b7e442af90334a7d362525

    • Size

      271KB

    • MD5

      f9f96ce631b7e442af90334a7d362525

    • SHA1

      cd687a557f710552222989713a93316a5657adf4

    • SHA256

      c40d4bea682186b7adf6828f71685c7039719a343f2c48f1240fab3f442a2b4f

    • SHA512

      66558a64a9d86f47b9c753e69e161184f449d840179b1becdb23b0fab4fe9cace7e0e3b48404740a8bb4530f8a82b96ab39855df02585dd4003e5cfa3baef60e

    • SSDEEP

      6144:q+FNvDu5NMsd+mF9gNMrhsgRx2aHNs8DtD1SpUx+:lFxDAdMmF94KZJ+L

    Score
    7/10
    discoverypersistenceupx

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks