Overview

overview

7

Static

static

7

31a6511429...18.exe

windows7-x64

7

31a6511429...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31a65114299c4405949acd4858778934_JaffaCakes118

  • Size

    81KB

  • Sample

    240709-x16gqsseja

  • MD5

    31a65114299c4405949acd4858778934

  • SHA1

    9f09f4d6e61bac7d547cda9cc1c66d88df0020d5

  • SHA256

    05aaf2d4855f765e016ad7fb7d55531cc6f03a5b7b31553aa81d7cea6c4597cd

  • SHA512

    430d87aa28263ca94c16aec2803f73691727bf4f8bfac6d95e3ef7342dd64b3201b94aef88fd666f4d4800078bce2be70b2da0ab3109014ec8d07463153f6142

  • SSDEEP

    1536:jKDPPTHbuzvZPtXjVaAZbBh8WconV1NNwYGO7ZCuWJ1lOIhsOV8Q62/do:jqPPTHKzRlVaAZtcGV1NNweWJ17em8Qe

Score
7/10
upx

Malware Config

Targets

    • Target

      31a65114299c4405949acd4858778934_JaffaCakes118

    • Size

      81KB

    • MD5

      31a65114299c4405949acd4858778934

    • SHA1

      9f09f4d6e61bac7d547cda9cc1c66d88df0020d5

    • SHA256

      05aaf2d4855f765e016ad7fb7d55531cc6f03a5b7b31553aa81d7cea6c4597cd

    • SHA512

      430d87aa28263ca94c16aec2803f73691727bf4f8bfac6d95e3ef7342dd64b3201b94aef88fd666f4d4800078bce2be70b2da0ab3109014ec8d07463153f6142

    • SSDEEP

      1536:jKDPPTHbuzvZPtXjVaAZbBh8WconV1NNwYGO7ZCuWJ1lOIhsOV8Q62/do:jqPPTHKzRlVaAZtcGV1NNweWJ17em8Qe

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks