Overview

overview

7

Static

static

1

f21636ca29...18.exe

windows7-x64

7

f21636ca29...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f21636ca296137ee88a92cf2bd24f61d_JaffaCakes118

  • Size

    2.9MB

  • Sample

    240415-2kwptaac49

  • MD5

    f21636ca296137ee88a92cf2bd24f61d

  • SHA1

    ef977f9e8e252cfd5b9b27641afc82e41c0f11b6

  • SHA256

    25ddd1eeb13913eed19177705d3874121a10f203712c0c126aa36b439b40f9b7

  • SHA512

    2b6b6ad3aec8308042ede796936cdf10d67076ca1b5d82f1fb44930a7b9cff185605f1131b7c8f292aa577b641acd8169cd3fcb2ee2576355cee883e0ccd9b26

  • SSDEEP

    49152:oW+TFggsqJxHXxCufcQrWTDY1kEbmwsrQFQbUdk199/vQA:oW+TFL73Euf5rCBEbm/rQFQbUe99/1

Score
7/10
upx

Malware Config

Targets

    • Target

      f21636ca296137ee88a92cf2bd24f61d_JaffaCakes118

    • Size

      2.9MB

    • MD5

      f21636ca296137ee88a92cf2bd24f61d

    • SHA1

      ef977f9e8e252cfd5b9b27641afc82e41c0f11b6

    • SHA256

      25ddd1eeb13913eed19177705d3874121a10f203712c0c126aa36b439b40f9b7

    • SHA512

      2b6b6ad3aec8308042ede796936cdf10d67076ca1b5d82f1fb44930a7b9cff185605f1131b7c8f292aa577b641acd8169cd3fcb2ee2576355cee883e0ccd9b26

    • SSDEEP

      49152:oW+TFggsqJxHXxCufcQrWTDY1kEbmwsrQFQbUdk199/vQA:oW+TFL73Euf5rCBEbm/rQFQbUe99/1

    Score
    7/10
    upx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks