Overview

overview

7

Static

static

7

4bf516868e...18.exe

windows7-x64

7

4bf516868e...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4bf516868ef064ee2a3481e517c5eb89_JaffaCakes118

  • Size

    1.4MB

  • Sample

    240715-3ymjqsvhlk

  • MD5

    4bf516868ef064ee2a3481e517c5eb89

  • SHA1

    409bbd5ed303ae82de4bed6575ea0b876804c6eb

  • SHA256

    82d12726504d201985eca7e099c4bd5fda5b18fbf94b3dc8924de8d19b60c31e

  • SHA512

    9dacf2fbf6794c47bc9909a8968e35ecfc65823f309667491c41af17d5f9048ca9bfe987d067840110ebff6e4c92ddf7bcb8f71e14c69b6301c1391463d238f1

  • SSDEEP

    12288:HPldPZdPnsH5utjLPhdPZdPXPldPZdPePldPZdPnsH5utjISDyTFtjLPqdPZdPXg:rsH5utjusH5utjhDyTFtjfsH5utj

Score
7/10
upx

Malware Config

Targets

    • Target

      4bf516868ef064ee2a3481e517c5eb89_JaffaCakes118

    • Size

      1.4MB

    • MD5

      4bf516868ef064ee2a3481e517c5eb89

    • SHA1

      409bbd5ed303ae82de4bed6575ea0b876804c6eb

    • SHA256

      82d12726504d201985eca7e099c4bd5fda5b18fbf94b3dc8924de8d19b60c31e

    • SHA512

      9dacf2fbf6794c47bc9909a8968e35ecfc65823f309667491c41af17d5f9048ca9bfe987d067840110ebff6e4c92ddf7bcb8f71e14c69b6301c1391463d238f1

    • SSDEEP

      12288:HPldPZdPnsH5utjLPhdPZdPXPldPZdPePldPZdPnsH5utjISDyTFtjLPqdPZdPXg:rsH5utjusH5utjhDyTFtjfsH5utj

    Score
    7/10
    upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks