Overview

overview

8

Static

static

3

2f14313cc1...18.exe

windows7-x64

8

2f14313cc1...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2f14313cc1168fbd3190d5210cbd1613_JaffaCakes118

  • Size

    387KB

  • Sample

    240709-frk11axdrj

  • MD5

    2f14313cc1168fbd3190d5210cbd1613

  • SHA1

    13e79128713c7db6edb0ba790321732577dea847

  • SHA256

    21bee3c19aad66bc7ea0cf78f372bc6303d897fd3fefc86f4c51cc9655faf6f5

  • SHA512

    d5b2351698d618d4b8a31f94346c142be6913cc3ab5e4b1c0c7f37cbac921e29ca22cb6ef38897251a31e913d3b7d3b48700854fc35d3663bf124d4ac63fe90c

  • SSDEEP

    6144:U11EBXkoNiKZKYBtHT3MuNRIs/fiE3rBRvZW5EzqsUK27M11AYWW1Xdq84xBb3b:U12WoiKZRh7MCRJzl9S+Pjnlq84

Score
8/10
adwarestealerupx

Malware Config

Targets

    • Target

      2f14313cc1168fbd3190d5210cbd1613_JaffaCakes118

    • Size

      387KB

    • MD5

      2f14313cc1168fbd3190d5210cbd1613

    • SHA1

      13e79128713c7db6edb0ba790321732577dea847

    • SHA256

      21bee3c19aad66bc7ea0cf78f372bc6303d897fd3fefc86f4c51cc9655faf6f5

    • SHA512

      d5b2351698d618d4b8a31f94346c142be6913cc3ab5e4b1c0c7f37cbac921e29ca22cb6ef38897251a31e913d3b7d3b48700854fc35d3663bf124d4ac63fe90c

    • SSDEEP

      6144:U11EBXkoNiKZKYBtHT3MuNRIs/fiE3rBRvZW5EzqsUK27M11AYWW1Xdq84xBb3b:U12WoiKZRh7MCRJzl9S+Pjnlq84

    Score
    8/10
    adwarestealerupx

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks