Overview

overview

8

Static

static

3

295464b811...18.exe

windows7-x64

8

295464b811...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    295464b811e6ecfadfaa39684c0b2443_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240706-zsd4masdnp

  • MD5

    295464b811e6ecfadfaa39684c0b2443

  • SHA1

    931a2707f8138d01fe92e17c1b80153799811282

  • SHA256

    9f4baa005f00452589267fc05b4eba828ef2c2e7b31a733be899ad6e80c4cc92

  • SHA512

    20d5f11aad8b224bfb4b6765744891018f5b18d4f7e8fd6624ae7ea59abb2052ae698ff6f951c79f24aeeabc8551523d66ffea92d42a98af293c9a13ba440980

  • SSDEEP

    24576:nxltQg4lk46epYcmbMzABQy6GHxejpeXReh6058VNK6je7:nxsagiz/epYKhmne7

Score
8/10
persistenceupx

Malware Config

Targets

    • Target

      295464b811e6ecfadfaa39684c0b2443_JaffaCakes118

    • Size

      1.1MB

    • MD5

      295464b811e6ecfadfaa39684c0b2443

    • SHA1

      931a2707f8138d01fe92e17c1b80153799811282

    • SHA256

      9f4baa005f00452589267fc05b4eba828ef2c2e7b31a733be899ad6e80c4cc92

    • SHA512

      20d5f11aad8b224bfb4b6765744891018f5b18d4f7e8fd6624ae7ea59abb2052ae698ff6f951c79f24aeeabc8551523d66ffea92d42a98af293c9a13ba440980

    • SSDEEP

      24576:nxltQg4lk46epYcmbMzABQy6GHxejpeXReh6058VNK6je7:nxsagiz/epYKhmne7

    Score
    8/10
    persistenceupx

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks