Overview

overview

8

Static

static

7

03e7857bd9...18.exe

windows7-x64

8

03e7857bd9...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    03e7857bd96b1e250b16aa8599a564ea_JaffaCakes118

  • Size

    24KB

  • Sample

    240620-hyh64avgke

  • MD5

    03e7857bd96b1e250b16aa8599a564ea

  • SHA1

    526057a647bddc8dd4d04262e6909db9436e19e1

  • SHA256

    00cf45c53c13ae0be59c42cc871b3dc1b36174ef48a5ed8e917adc0ba669067e

  • SHA512

    82f542c1c0abd6ef77dc36ef5b2453f7c54121d6497405d91a43b6c2553fc6331f9cec95fef74ebe88ad4865f141a0e267718021288dc4f7517f8915ab450e51

  • SSDEEP

    384:FFLg2MOlzv2aiVWkHXDEfmthWQnm54a4FQ9M4Q2K+8Gg5HtEYPz2:FFLJ+aiLHzEfraW9KvftWYPz

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      03e7857bd96b1e250b16aa8599a564ea_JaffaCakes118

    • Size

      24KB

    • MD5

      03e7857bd96b1e250b16aa8599a564ea

    • SHA1

      526057a647bddc8dd4d04262e6909db9436e19e1

    • SHA256

      00cf45c53c13ae0be59c42cc871b3dc1b36174ef48a5ed8e917adc0ba669067e

    • SHA512

      82f542c1c0abd6ef77dc36ef5b2453f7c54121d6497405d91a43b6c2553fc6331f9cec95fef74ebe88ad4865f141a0e267718021288dc4f7517f8915ab450e51

    • SSDEEP

      384:FFLg2MOlzv2aiVWkHXDEfmthWQnm54a4FQ9M4Q2K+8Gg5HtEYPz2:FFLJ+aiLHzEfraW9KvftWYPz

    Score
    8/10
    upxpersistence

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks