Overview

overview

7

Static

static

7

2e78cfd8ae...18.exe

windows7-x64

7

2e78cfd8ae...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e78cfd8ae030d781790789eca95699f_JaffaCakes118

  • Size

    28KB

  • Sample

    240709-bfyqhayanm

  • MD5

    2e78cfd8ae030d781790789eca95699f

  • SHA1

    1092e66f727a12113a3a4618b353183376ed3c20

  • SHA256

    07f1f7bacb7c465d5fa63052f42a40a2e164bd4d3c02eb89f95ee89b15a4f5ed

  • SHA512

    6b17270b0c5a94615b247b538d93cfa1566288214ad923fd0f061a4962c59bbc9e64d250cff83c28948a96062ab6a4300a8bdf82fbf598f4b100525e35bdc88d

  • SSDEEP

    384:SHqoW3UVijHj2F6RRIlRWVp2XARM/dGqAGE6I+uj4v4POJSCDCOgAx7r6+e9PfqY:SKH3OqDqRTUAOqBucMOxDDxCha5G

Score
7/10
aspackv2

Malware Config

Targets

    • Target

      2e78cfd8ae030d781790789eca95699f_JaffaCakes118

    • Size

      28KB

    • MD5

      2e78cfd8ae030d781790789eca95699f

    • SHA1

      1092e66f727a12113a3a4618b353183376ed3c20

    • SHA256

      07f1f7bacb7c465d5fa63052f42a40a2e164bd4d3c02eb89f95ee89b15a4f5ed

    • SHA512

      6b17270b0c5a94615b247b538d93cfa1566288214ad923fd0f061a4962c59bbc9e64d250cff83c28948a96062ab6a4300a8bdf82fbf598f4b100525e35bdc88d

    • SSDEEP

      384:SHqoW3UVijHj2F6RRIlRWVp2XARM/dGqAGE6I+uj4v4POJSCDCOgAx7r6+e9PfqY:SKH3OqDqRTUAOqBucMOxDDxCha5G

    Score
    7/10
    aspackv2

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks