Overview

overview

7

Static

static

7

8e8730c236...18.exe

windows7-x64

7

8e8730c236...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e8730c2364104924ba2d6b982716faf_JaffaCakes118

  • Size

    313KB

  • Sample

    240812-ncsrassglb

  • MD5

    8e8730c2364104924ba2d6b982716faf

  • SHA1

    55e4693e1cd861f349a9e9bea58b7d6a102c5eee

  • SHA256

    d280ba8a00ed6d17a243396d2e9d64a3a1b44667dfafa6de8aba5d93c8150340

  • SHA512

    decb40146288b9d06c070fd0f98fe1b05a48b36f726d7e6da068f134ad68339321fbf85ac3c951a9bdaaaeb7e9a3bd24aa4e6fef934d973203ed68faeadd8318

  • SSDEEP

    6144:tVYmoP2D+6u6e1t0pUVnxNwDwIj9o9sy7aNC5asej5zYQou0MiJ/A0aufAKSN7bP:H2Pn6uN/0pU5XwDNox7aNo4OJ9pfAKCP

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      8e8730c2364104924ba2d6b982716faf_JaffaCakes118

    • Size

      313KB

    • MD5

      8e8730c2364104924ba2d6b982716faf

    • SHA1

      55e4693e1cd861f349a9e9bea58b7d6a102c5eee

    • SHA256

      d280ba8a00ed6d17a243396d2e9d64a3a1b44667dfafa6de8aba5d93c8150340

    • SHA512

      decb40146288b9d06c070fd0f98fe1b05a48b36f726d7e6da068f134ad68339321fbf85ac3c951a9bdaaaeb7e9a3bd24aa4e6fef934d973203ed68faeadd8318

    • SSDEEP

      6144:tVYmoP2D+6u6e1t0pUVnxNwDwIj9o9sy7aNC5asej5zYQou0MiJ/A0aufAKSN7bP:H2Pn6uN/0pU5XwDNox7aNo4OJ9pfAKCP

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks