Overview

overview

7

Static

static

7

2ce6540bb0...18.exe

windows7-x64

7

2ce6540bb0...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2ce6540bb079062aec8463570b4f1a36_JaffaCakes118

  • Size

    71KB

  • Sample

    240708-s7d9lswdmq

  • MD5

    2ce6540bb079062aec8463570b4f1a36

  • SHA1

    ed704c3ad93d9ee20e21da3d3b87d228dd0c7a07

  • SHA256

    910ab929a292d664d594aa9d6f2cae49b8d0242f1139577f04962366c7f6dd24

  • SHA512

    6aa5dc581734ffe9bb1bc482ccc70895402d33f5bbea565e6c5f8c41445348ffb54388affbebda4c1d82370cd16df66688b9aea59f6f41097453417e28b13fde

  • SSDEEP

    1536:Z8V6g/5b+Dae3E/j9pGtbFIViUsX93kded7KHWYAaC2k:Z8V6E5e3YxGF6zsX+dO2WYS2k

Score
7/10
evasiontrojanupx

Malware Config

Targets

    • Target

      2ce6540bb079062aec8463570b4f1a36_JaffaCakes118

    • Size

      71KB

    • MD5

      2ce6540bb079062aec8463570b4f1a36

    • SHA1

      ed704c3ad93d9ee20e21da3d3b87d228dd0c7a07

    • SHA256

      910ab929a292d664d594aa9d6f2cae49b8d0242f1139577f04962366c7f6dd24

    • SHA512

      6aa5dc581734ffe9bb1bc482ccc70895402d33f5bbea565e6c5f8c41445348ffb54388affbebda4c1d82370cd16df66688b9aea59f6f41097453417e28b13fde

    • SSDEEP

      1536:Z8V6g/5b+Dae3E/j9pGtbFIViUsX93kded7KHWYAaC2k:Z8V6E5e3YxGF6zsX+dO2WYS2k

    Score
    7/10
    evasiontrojanupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks