Overview

overview

8

Static

static

3

168dc4ff26...18.exe

windows7-x64

1

168dc4ff26...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    168dc4ff267cdccd4bcff191fdc940f0_JaffaCakes118

  • Size

    144KB

  • Sample

    240627-s3b9fszgpj

  • MD5

    168dc4ff267cdccd4bcff191fdc940f0

  • SHA1

    f492798155bd3ba81285774a2389a3dd1abea0a0

  • SHA256

    59e25843e61ad86941cd9c6ce06a0e5f1d0228bc70c62a76fd63abbe069ff413

  • SHA512

    a34682a48adcfb585386c84ab2b6888f360e365a0cd523214ff5b9be2480408f864ed672b69425e266cc73eaefe56130cb54cc74b29e75b31f9e8e905b9e34c3

  • SSDEEP

    3072:WTHsyG3Yg6AfgEHSOKn+Sm0pNOT645l0W69jRq8:Y31L+FQOrlJoV

Score
8/10
upx

Malware Config

Targets

    • Target

      168dc4ff267cdccd4bcff191fdc940f0_JaffaCakes118

    • Size

      144KB

    • MD5

      168dc4ff267cdccd4bcff191fdc940f0

    • SHA1

      f492798155bd3ba81285774a2389a3dd1abea0a0

    • SHA256

      59e25843e61ad86941cd9c6ce06a0e5f1d0228bc70c62a76fd63abbe069ff413

    • SHA512

      a34682a48adcfb585386c84ab2b6888f360e365a0cd523214ff5b9be2480408f864ed672b69425e266cc73eaefe56130cb54cc74b29e75b31f9e8e905b9e34c3

    • SSDEEP

      3072:WTHsyG3Yg6AfgEHSOKn+Sm0pNOT645l0W69jRq8:Y31L+FQOrlJoV

    Score
    8/10
    upx

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks