Overview

overview

7

Static

static

7

3e0dfd74f8...18.exe

windows7-x64

7

3e0dfd74f8...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e0dfd74f87f1c3cacb3d52f9ec34e1e_JaffaCakes118

  • Size

    221KB

  • Sample

    240712-twb6jstbqd

  • MD5

    3e0dfd74f87f1c3cacb3d52f9ec34e1e

  • SHA1

    34193ae88a3852c8ecbdd6851c4e14b8c4c9df9b

  • SHA256

    93913596742bd8928e1a9a5e4f6e75e070155b3629827fbd43605702ca1e9261

  • SHA512

    2206ae7504531c273b1e4bbaf35a7c9b7a4f4871d273a2605b3353b390dcd54d931b65a6e32867c9ae9934cc2492e2d60c64ffb1c4ad9fede97d6b1ba1594e28

  • SSDEEP

    6144:6f4xe+SJVrL/PL6x8DCH+JigkjBIltvuPSHzC6ynOhTX1In:6Oe+43/2xIJJigk2vvuPAqCTW

Score
7/10
upx

Malware Config

Targets

    • Target

      3e0dfd74f87f1c3cacb3d52f9ec34e1e_JaffaCakes118

    • Size

      221KB

    • MD5

      3e0dfd74f87f1c3cacb3d52f9ec34e1e

    • SHA1

      34193ae88a3852c8ecbdd6851c4e14b8c4c9df9b

    • SHA256

      93913596742bd8928e1a9a5e4f6e75e070155b3629827fbd43605702ca1e9261

    • SHA512

      2206ae7504531c273b1e4bbaf35a7c9b7a4f4871d273a2605b3353b390dcd54d931b65a6e32867c9ae9934cc2492e2d60c64ffb1c4ad9fede97d6b1ba1594e28

    • SSDEEP

      6144:6f4xe+SJVrL/PL6x8DCH+JigkjBIltvuPSHzC6ynOhTX1In:6Oe+43/2xIJJigk2vvuPAqCTW

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks