Overview

overview

7

Static

static

3

302dd0aafe...18.exe

windows7-x64

7

302dd0aafe...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    302dd0aafe6bc32804fd08fe0f1bdc94_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240709-njvt8stclg

  • MD5

    302dd0aafe6bc32804fd08fe0f1bdc94

  • SHA1

    7fa51f26461834ad95aafd6ebbdb1782a2fcfe0b

  • SHA256

    f46b26c39fc8edcf006223e5f3f860cfe4c489591ff36f867357cd5692c4f7bb

  • SHA512

    34fb07f1843b8c43ab10c415800195c422b2f980308d51537c3c301615450b5c573f14cb531300deb2cd2307a55fc41694f32c8fe06c7dc2ed477c56197f69f0

  • SSDEEP

    49152:o6XgUidatQdtCFyZM/TcMgYbOmocT9ln3uYTj:o6XgrUtQdw0l6vFBlbTj

Score
7/10
upx

Malware Config

Targets

    • Target

      302dd0aafe6bc32804fd08fe0f1bdc94_JaffaCakes118

    • Size

      1.7MB

    • MD5

      302dd0aafe6bc32804fd08fe0f1bdc94

    • SHA1

      7fa51f26461834ad95aafd6ebbdb1782a2fcfe0b

    • SHA256

      f46b26c39fc8edcf006223e5f3f860cfe4c489591ff36f867357cd5692c4f7bb

    • SHA512

      34fb07f1843b8c43ab10c415800195c422b2f980308d51537c3c301615450b5c573f14cb531300deb2cd2307a55fc41694f32c8fe06c7dc2ed477c56197f69f0

    • SSDEEP

      49152:o6XgUidatQdtCFyZM/TcMgYbOmocT9ln3uYTj:o6XgrUtQdw0l6vFBlbTj

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks