c8958f37264cb76cdce7948dc673d7d8a677ce2d002bd023a30f6613fe53dfa9 | Triage

Submit
Reports

Overview

overview

8

Static

static

3

8207a2d486...18.exe

windows7-x64

1

8207a2d486...18.exe

windows10-2004-x64

8

Sharing

General

Target

8207a2d48651c610671973987148916e_JaffaCakes118
Size

101KB
Sample

240801-2pvnbavdlf
MD5

8207a2d48651c610671973987148916e
SHA1

da6f837204486a5ab7b57588b1fe5611d2945613
SHA256

c8958f37264cb76cdce7948dc673d7d8a677ce2d002bd023a30f6613fe53dfa9
SHA512

18a88f604410af92d43e6175278c2eb4bd83d680e5aae5eaa2d4406e0dbd7266ccd89aa339120be411507b603b18d744b8d62b39adf1d29f794ce31522f551e3
SSDEEP

1536:D1uM3g3u1CEVEdBQg311Fu0DAq/BfBNM1c5ALltMuJcG5kXOezNoRIQxwaheVPiK:xu73ujE3511sotrKLMuv2zyIMwmeVaK

Score

8^/10

defense_evasion discovery upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

8207a2d48651c610671973987148916e_JaffaCakes118.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

8207a2d48651c610671973987148916e_JaffaCakes118.exe

Resource

win10v2004-20240730-en

defense_evasion discovery upx

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  8207a2d48651c610671973987148916e_JaffaCakes118
- Size
  
  101KB
- MD5
  
  8207a2d48651c610671973987148916e
- SHA1
  
  da6f837204486a5ab7b57588b1fe5611d2945613
- SHA256
  
  c8958f37264cb76cdce7948dc673d7d8a677ce2d002bd023a30f6613fe53dfa9
- SHA512
  
  18a88f604410af92d43e6175278c2eb4bd83d680e5aae5eaa2d4406e0dbd7266ccd89aa339120be411507b603b18d744b8d62b39adf1d29f794ce31522f551e3
- SSDEEP
  
  1536:D1uM3g3u1CEVEdBQg311Fu0DAq/BfBNM1c5ALltMuJcG5kXOezNoRIQxwaheVPiK:xu73ujE3511sotrKLMuv2zyIMwmeVaK
Score

8^/10

defense_evasion discovery upx
- Drops file in Drivers directory
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

defense_evasiondiscoveryupx

© 2018-2025

Terms | Privacy