Overview

overview

7

Static

static

7

786108dd67...18.exe

windows7-x64

7

786108dd67...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    786108dd67caea8c93afb8814751e30b_JaffaCakes118

  • Size

    18KB

  • Sample

    240727-q4v2vavgnd

  • MD5

    786108dd67caea8c93afb8814751e30b

  • SHA1

    4ae556cec29e6544c2341bac146fd8467dfb0b36

  • SHA256

    95ede52ec77a666c2a47e95b2fdac86532404121cc21cbe43ffa40bc5927ed88

  • SHA512

    6c9b93c483059c31d2c19b2379564e8ea39f8de775a60a2bbe6da691b69f98bf64cce1ffc781208c3eed4b8e293b47e68bb9ad23c867376c59b4d42b016c8227

  • SSDEEP

    384:Kpj0XRqAO7gvEA+HzI03u521luTfbTHC4WaJ3+NKEnM+gd5Chfa0T:Kh0XRdO7YiUGuc2ffi4WaxjEKkT

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      786108dd67caea8c93afb8814751e30b_JaffaCakes118

    • Size

      18KB

    • MD5

      786108dd67caea8c93afb8814751e30b

    • SHA1

      4ae556cec29e6544c2341bac146fd8467dfb0b36

    • SHA256

      95ede52ec77a666c2a47e95b2fdac86532404121cc21cbe43ffa40bc5927ed88

    • SHA512

      6c9b93c483059c31d2c19b2379564e8ea39f8de775a60a2bbe6da691b69f98bf64cce1ffc781208c3eed4b8e293b47e68bb9ad23c867376c59b4d42b016c8227

    • SSDEEP

      384:Kpj0XRqAO7gvEA+HzI03u521luTfbTHC4WaJ3+NKEnM+gd5Chfa0T:Kh0XRdO7YiUGuc2ffi4WaxjEKkT

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks