eb8636afcde958d15d1e43779500b8a21980727a4d9559773e41d1f25c0ccf4a

General

Target
124f69160117b292e2ed2de331d5e08f_JaffaCakes118
Size 68KB
Sample240701-jdfe5ssflp
SHA256 eb8636afcde958d15d1e43779500b8a21980727a4d9559773e41d1f25c0ccf4a
MD5 124f69160117b292e2ed2de331d5e08f
SHA1 fce8710e72db75553d33644ecb7b84d3edae9b26
SHA512 ce6ee3fdfc5b576935f897ee9c05f90ee5f5023b4a4847c8c62cc2380f346fb77145e1df5d949bed90965a6e545d42c9e34cb8c3ce1a132ad4d8385159ce57c9
SSDEEP 1536:kOC3oppUdCzUwm20MyVpzCRDaroYNhseIXf5wu/3eotT:lC4niCDmznBkhCu/1J
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Targets

- Target
  124f69160117b292e2ed2de331d5e08f_JaffaCakes118
- Size 68KB
- SHA256 eb8636afcde958d15d1e43779500b8a21980727a4d9559773e41d1f25c0ccf4a
- MD5 124f69160117b292e2ed2de331d5e08f
- SHA1 fce8710e72db75553d33644ecb7b84d3edae9b26
- SHA512 ce6ee3fdfc5b576935f897ee9c05f90ee5f5023b4a4847c8c62cc2380f346fb77145e1df5d949bed90965a6e545d42c9e34cb8c3ce1a132ad4d8385159ce57c9
- SSDEEP 1536:kOC3oppUdCzUwm20MyVpzCRDaroYNhseIXf5wu/3eotT:lC4niCDmznBkhCu/1J
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

defense_evasion discovery exploit upx
- Possible privilege escalation attempt
  exploit
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Modifies file permissions
  discovery
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- File and Directory Permissions Modification: Windows File and Directory Permissions Modification
  defense_evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

2

T1222

Windows File and Directory Permissions Modification

1

T1222.001

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Possible privilege escalation attempt

Checks computer location settings

Deletes itself

Loads dropped DLL

Modifies file permissions

UPX packed file

File and Directory Permissions Modification: Windows File and Directory Permissions Modification

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2