Overview

overview

8

Static

static

7

705b8a9f0d...18.exe

windows7-x64

8

705b8a9f0d...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    705b8a9f0db07f15c61fa610dc6a4c6c_JaffaCakes118

  • Size

    137KB

  • Sample

    240725-txg37a1dmj

  • MD5

    705b8a9f0db07f15c61fa610dc6a4c6c

  • SHA1

    7fdc953bcb265a70aba4441edd9090c9bf465826

  • SHA256

    8d39f0c5ff66be9e7531472899512087cc5505d7af23c3f424303a60fe915002

  • SHA512

    f90c3a24bcf24d33fed0eaffd71d03d565c3627c7e1ea77295829c85714decb4282a1507f112642b761169f0e342422c7ed7464340eda039c8c3e2c405dc9aac

  • SSDEEP

    1536:u4m5hdG78SadgsB6qAVOO1IrScroNmf97wNyic2fkf1a4HaBRr9wzdggaWL:uFk7xGgs8qFjf97y7c2fVYaBRBmgg

Score
8/10
discoveryevasionexecutionupx

Malware Config

Targets

    • Target

      705b8a9f0db07f15c61fa610dc6a4c6c_JaffaCakes118

    • Size

      137KB

    • MD5

      705b8a9f0db07f15c61fa610dc6a4c6c

    • SHA1

      7fdc953bcb265a70aba4441edd9090c9bf465826

    • SHA256

      8d39f0c5ff66be9e7531472899512087cc5505d7af23c3f424303a60fe915002

    • SHA512

      f90c3a24bcf24d33fed0eaffd71d03d565c3627c7e1ea77295829c85714decb4282a1507f112642b761169f0e342422c7ed7464340eda039c8c3e2c405dc9aac

    • SSDEEP

      1536:u4m5hdG78SadgsB6qAVOO1IrScroNmf97wNyic2fkf1a4HaBRr9wzdggaWL:uFk7xGgs8qFjf97y7c2fVYaBRBmgg

    Score
    8/10
    discoveryevasionexecutionupx

    • Drops file in Drivers directory

    • Stops running service(s)

      evasionexecution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks