Overview

overview

9

Static

static

3

25915cdb67...18.exe

windows7-x64

9

25915cdb67...18.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    25915cdb67c54ec11d7a0ac7cb364f20_JaffaCakes118

  • Size

    816KB

  • Sample

    240508-s7v75aec58

  • MD5

    25915cdb67c54ec11d7a0ac7cb364f20

  • SHA1

    4f76fc42564f6f8e249eaa47b933c3225fa4d8b2

  • SHA256

    bd4e9cd2fa9c4eea41597c47f99dc3143e9099df65991d21c5c52d3994f96294

  • SHA512

    01dc87e6244efa3da455c2ff45be36e7c621a8938720bb3d66f240bc6c1c043a953d0d8d8649d1886ac4fe27368416b592bf9fa7b6c198a9c51e018235c67a11

  • SSDEEP

    12288:l3TD4DnRfwKl+j9Fc5vgPCzYC95m1UpmZhor1oAd6qopy53Tjacjgkdsr:9TQuKl+j9Fc5IUYnWpHr6A4NivaROsr

Score
9/10
upx

Malware Config

Targets

    • Target

      25915cdb67c54ec11d7a0ac7cb364f20_JaffaCakes118

    • Size

      816KB

    • MD5

      25915cdb67c54ec11d7a0ac7cb364f20

    • SHA1

      4f76fc42564f6f8e249eaa47b933c3225fa4d8b2

    • SHA256

      bd4e9cd2fa9c4eea41597c47f99dc3143e9099df65991d21c5c52d3994f96294

    • SHA512

      01dc87e6244efa3da455c2ff45be36e7c621a8938720bb3d66f240bc6c1c043a953d0d8d8649d1886ac4fe27368416b592bf9fa7b6c198a9c51e018235c67a11

    • SSDEEP

      12288:l3TD4DnRfwKl+j9Fc5vgPCzYC95m1UpmZhor1oAd6qopy53Tjacjgkdsr:9TQuKl+j9Fc5IUYnWpHr6A4NivaROsr

    Score
    9/10
    upx

    • Nirsoft

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks