Overview

overview

8

Static

static

3

826dbad12d...18.exe

windows7-x64

8

826dbad12d...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    826dbad12d167ff301a0642736075075_JaffaCakes118

  • Size

    423KB

  • Sample

    240802-bcxn2awdlm

  • MD5

    826dbad12d167ff301a0642736075075

  • SHA1

    39189f55f19467faed3f85e1f3c168da6d7bf9a8

  • SHA256

    94bd5aae6f377f792f6faf4ce56d0beba8988fd539c8a666eab842e8c200289d

  • SHA512

    c114d45c931db6609c571108ab3e1aa7ffcea0012c910051cc207b487f95bb08479c6600c60834ef93f8461d4ee8e83b3d5dc2163a76aac3e21f6256e50f97dd

  • SSDEEP

    12288:15UXtNXYOUDV11+dLnwc9vJ/udDMu9YCE9feN1lzegAc3:15SzYOUDV11MweNoAu9Yt9O3zeg

Score
8/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      826dbad12d167ff301a0642736075075_JaffaCakes118

    • Size

      423KB

    • MD5

      826dbad12d167ff301a0642736075075

    • SHA1

      39189f55f19467faed3f85e1f3c168da6d7bf9a8

    • SHA256

      94bd5aae6f377f792f6faf4ce56d0beba8988fd539c8a666eab842e8c200289d

    • SHA512

      c114d45c931db6609c571108ab3e1aa7ffcea0012c910051cc207b487f95bb08479c6600c60834ef93f8461d4ee8e83b3d5dc2163a76aac3e21f6256e50f97dd

    • SSDEEP

      12288:15UXtNXYOUDV11+dLnwc9vJ/udDMu9YCE9feN1lzegAc3:15SzYOUDV11MweNoAu9Yt9O3zeg

    Score
    8/10
    discoveryevasionpersistenceupx

    • Disables Task Manager via registry modification

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks