Overview

overview

7

Static

static

3

7350543180...18.exe

windows7-x64

7

7350543180...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    73505431808f35451429c9f2928fed8c_JaffaCakes118

  • Size

    3.6MB

  • Sample

    240726-kghv4sxbkn

  • MD5

    73505431808f35451429c9f2928fed8c

  • SHA1

    246594865870a10e4b3354915d1bc26ae6a8fca8

  • SHA256

    57e34074450dc3b3a0595d45e69952c3c331bbff9f25771af7895a1bb7bd010e

  • SHA512

    6cef32fc926f53c4282a5afcc9acf29ddf25f1767211e60dfa8dbdf6799e099757b12b62e36010cbe23701885612bb7b778a59c4f2d081f6ee2b095cd5bfbbd8

  • SSDEEP

    98304:4giUcW86XsORYZl4/eWTsOE+mf+4kTZXa/v/iZCeZfAN:H8jLZiGaTc/HiUvN

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      73505431808f35451429c9f2928fed8c_JaffaCakes118

    • Size

      3.6MB

    • MD5

      73505431808f35451429c9f2928fed8c

    • SHA1

      246594865870a10e4b3354915d1bc26ae6a8fca8

    • SHA256

      57e34074450dc3b3a0595d45e69952c3c331bbff9f25771af7895a1bb7bd010e

    • SHA512

      6cef32fc926f53c4282a5afcc9acf29ddf25f1767211e60dfa8dbdf6799e099757b12b62e36010cbe23701885612bb7b778a59c4f2d081f6ee2b095cd5bfbbd8

    • SSDEEP

      98304:4giUcW86XsORYZl4/eWTsOE+mf+4kTZXa/v/iZCeZfAN:H8jLZiGaTc/HiUvN

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks