Overview

overview

7

Static

static

7

271920ef68...18.exe

windows7-x64

7

271920ef68...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    271920ef68817330bea06fddcbc99dd9_JaffaCakes118

  • Size

    191KB

  • Sample

    240705-y4a1nsxdlh

  • MD5

    271920ef68817330bea06fddcbc99dd9

  • SHA1

    e2f7d27798ea251132709cd89a4a08e3180ae514

  • SHA256

    5c54624fe01ac9408a5ef881d8337c3a6a8ba421216b0e1e9047110101f1407e

  • SHA512

    4dec69caaea155fa5159119c6dd34766d20d8b14ec132b5741350a7bf49b27e386833f937fe4b3c62e6f70c716e3be2b485e5eb59a7514ebae2cb81ae1f61a83

  • SSDEEP

    3072:PL65Vh6s87KjPdEzi/Ak0Z2kysQoG0NXMrkLXSHXkkE+0FHj1VOOFFlKHOJJ5axr:Q6s8OjPGziYkqMFf0NXwsCHXC/j1fgOk

Score
7/10
persistenceupx

Malware Config

Targets

    • Target

      271920ef68817330bea06fddcbc99dd9_JaffaCakes118

    • Size

      191KB

    • MD5

      271920ef68817330bea06fddcbc99dd9

    • SHA1

      e2f7d27798ea251132709cd89a4a08e3180ae514

    • SHA256

      5c54624fe01ac9408a5ef881d8337c3a6a8ba421216b0e1e9047110101f1407e

    • SHA512

      4dec69caaea155fa5159119c6dd34766d20d8b14ec132b5741350a7bf49b27e386833f937fe4b3c62e6f70c716e3be2b485e5eb59a7514ebae2cb81ae1f61a83

    • SSDEEP

      3072:PL65Vh6s87KjPdEzi/Ak0Z2kysQoG0NXMrkLXSHXkkE+0FHj1VOOFFlKHOJJ5axr:Q6s8OjPGziYkqMFf0NXwsCHXC/j1fgOk

    Score
    7/10
    persistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks