General

  • Target

    ec299fa49af887b8048fffe0c7ff7d81_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240410-2tdklagf9s

  • MD5

    ec299fa49af887b8048fffe0c7ff7d81

  • SHA1

    1cb8dea56ccf3217ded89686ef2bde37d4ef4521

  • SHA256

    37c843ef0e40cdbd97720c992bed22a44b9a193727d9b2be81df6519e194cb51

  • SHA512

    20e9e1425b3620c350f56fb983b0cf12aff9348a4a5ff2a57e27ebc4c6fb48119a9f5b96bf348d0927af4332a93c635e02aeec89eaa10d9bae25bf0a465daca2

  • SSDEEP

    24576:NFE//Tct4bOsCVyyY3V8ZlxTUrMoPBtTODouN8my+:HSVCMHOZmMOYou7d

Score
7/10
upx

Malware Config

Targets

    • Target

      ec299fa49af887b8048fffe0c7ff7d81_JaffaCakes118

    • Size

      1.0MB

    • MD5

      ec299fa49af887b8048fffe0c7ff7d81

    • SHA1

      1cb8dea56ccf3217ded89686ef2bde37d4ef4521

    • SHA256

      37c843ef0e40cdbd97720c992bed22a44b9a193727d9b2be81df6519e194cb51

    • SHA512

      20e9e1425b3620c350f56fb983b0cf12aff9348a4a5ff2a57e27ebc4c6fb48119a9f5b96bf348d0927af4332a93c635e02aeec89eaa10d9bae25bf0a465daca2

    • SSDEEP

      24576:NFE//Tct4bOsCVyyY3V8ZlxTUrMoPBtTODouN8my+:HSVCMHOZmMOYou7d

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

MITRE ATT&CK Enterprise v15

Tasks