Overview

overview

7

Static

static

7

854b82732e...18.exe

windows7-x64

7

854b82732e...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    854b82732e1e42f9fb2838b0f4467bb4_JaffaCakes118

  • Size

    215KB

  • Sample

    240810-jgadasvfqh

  • MD5

    854b82732e1e42f9fb2838b0f4467bb4

  • SHA1

    254f01afab8bc450fc6ae7ffee7500501506392e

  • SHA256

    3ba26ed03035cd73871c06b6dfd270a9806c12c8ca7fdd41a9fea9dad85fef2e

  • SHA512

    e0b6a4564a7560b0d3d510bdbc59fc2d3a0c7b1da19b3e2f0470e288ae1d6eacf35454244fc17fac5a96fd725eed7943f68e606ec0e05b8f4ec2f876252c4ae5

  • SSDEEP

    3072:UL0U+1dAHBVikX0Mq2Y/afe7DUtzTJ1JTLYSdtceiRUTWXBoKl9aWWSH:UfHLx3/fEDktcxa++c9aaH

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      854b82732e1e42f9fb2838b0f4467bb4_JaffaCakes118

    • Size

      215KB

    • MD5

      854b82732e1e42f9fb2838b0f4467bb4

    • SHA1

      254f01afab8bc450fc6ae7ffee7500501506392e

    • SHA256

      3ba26ed03035cd73871c06b6dfd270a9806c12c8ca7fdd41a9fea9dad85fef2e

    • SHA512

      e0b6a4564a7560b0d3d510bdbc59fc2d3a0c7b1da19b3e2f0470e288ae1d6eacf35454244fc17fac5a96fd725eed7943f68e606ec0e05b8f4ec2f876252c4ae5

    • SSDEEP

      3072:UL0U+1dAHBVikX0Mq2Y/afe7DUtzTJ1JTLYSdtceiRUTWXBoKl9aWWSH:UfHLx3/fEDktcxa++c9aaH

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks