Overview

overview

8

Static

static

7

0ff31c736f...18.exe

windows7-x64

7

0ff31c736f...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ff31c736f57dee1ac5efdaf286e3e4c_JaffaCakes118

  • Size

    36KB

  • Sample

    240625-3mrdjs1arf

  • MD5

    0ff31c736f57dee1ac5efdaf286e3e4c

  • SHA1

    7745de3771bea0fde3d3a76d215dcbed3877aa60

  • SHA256

    7c3aaf280b08134e4d45bc3d439c42a5871af7be6aa4528f302b258ffa078136

  • SHA512

    7dad6d891f25549ba690cd4aad2ad08fdfe41704955177853df51f33f5b2865f2f706460faa7dcede3ce0b620c0b0b5c126d5f995d95c0bcc074d888f906db8d

  • SSDEEP

    768:zIaTp5pmfLBCj/WDoCnrtJ/OH12WLS+rffDVIvQ:zIkpHy42nrtxOH12M3ffD3

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      0ff31c736f57dee1ac5efdaf286e3e4c_JaffaCakes118

    • Size

      36KB

    • MD5

      0ff31c736f57dee1ac5efdaf286e3e4c

    • SHA1

      7745de3771bea0fde3d3a76d215dcbed3877aa60

    • SHA256

      7c3aaf280b08134e4d45bc3d439c42a5871af7be6aa4528f302b258ffa078136

    • SHA512

      7dad6d891f25549ba690cd4aad2ad08fdfe41704955177853df51f33f5b2865f2f706460faa7dcede3ce0b620c0b0b5c126d5f995d95c0bcc074d888f906db8d

    • SSDEEP

      768:zIaTp5pmfLBCj/WDoCnrtJ/OH12WLS+rffDVIvQ:zIkpHy42nrtxOH12M3ffD3

    Score
    8/10
    upxpersistence

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks