Overview

overview

10

Static

static

3

f154021e7f...18.exe

windows7-x64

10

f154021e7f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f154021e7f4d232f969a67d3c07f548a_JaffaCakes118

  • Size

    13KB

  • Sample

    240415-sb3bkahc39

  • MD5

    f154021e7f4d232f969a67d3c07f548a

  • SHA1

    8aab0bcab51fb5b37bed2e7062a92c17386fc3ee

  • SHA256

    63463a610fea5ef1e61f1e1c971eb4f37b7eb96e12371965e7b547c31ecc3574

  • SHA512

    c3d04227b4012cfe05f4f96cce5c8f1974a34530620c536c3f21fd38cf5b5aedb834143e1c88868281c29e2bcb436d4c1353e720156f85d1d27369024b9ba284

  • SSDEEP

    384:6K+dKfzQHxFxRmyja4QhiP7UlY/pjK7aylryylFyylYLlmylylyy8yyCL:v+dAURFxna4QAPQlYg7aylryylFyylYw

Score
10/10
upatredownloader

Malware Config

Targets

    • Target

      f154021e7f4d232f969a67d3c07f548a_JaffaCakes118

    • Size

      13KB

    • MD5

      f154021e7f4d232f969a67d3c07f548a

    • SHA1

      8aab0bcab51fb5b37bed2e7062a92c17386fc3ee

    • SHA256

      63463a610fea5ef1e61f1e1c971eb4f37b7eb96e12371965e7b547c31ecc3574

    • SHA512

      c3d04227b4012cfe05f4f96cce5c8f1974a34530620c536c3f21fd38cf5b5aedb834143e1c88868281c29e2bcb436d4c1353e720156f85d1d27369024b9ba284

    • SSDEEP

      384:6K+dKfzQHxFxRmyja4QhiP7UlY/pjK7aylryylFyylYLlmylylyy8yyCL:v+dAURFxna4QAPQlYg7aylryylFyylYw

    Score
    10/10
    upatredownloader

    • Upatre

      Upatre is a generic malware downloader.

      downloaderupatre

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks