Overview

overview

7

Static

static

3

96f92cfdee...18.exe

windows7-x64

7

96f92cfdee...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    96f92cfdee68ecfcf016c2d4104ef397_JaffaCakes118

  • Size

    5.1MB

  • Sample

    240814-vx83cayfnj

  • MD5

    96f92cfdee68ecfcf016c2d4104ef397

  • SHA1

    c2ed10a3fc906d46450dbcfe082a1f351732c973

  • SHA256

    32e15aa26a62761a64dfac28e63e8407c124ce2f823d9c5b67a8365ed902d0b8

  • SHA512

    c2a1c02b7b2261b9e962102317dd3eb102db5e59aabac77fed6c39747e80bf5fec3975f27ef018f7ea673c4ecf899cc2e0130d6be19f2ff9c7a42431828e5d38

  • SSDEEP

    98304:DUo2jCVAvzvcI06rDWGe+i5Ca6Tt2Sk29seCQdwr783Q0h4gkQ33zcFNHx2I:raCVALER6rmd5lSkebw03Hh4XQ33mR2I

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      96f92cfdee68ecfcf016c2d4104ef397_JaffaCakes118

    • Size

      5.1MB

    • MD5

      96f92cfdee68ecfcf016c2d4104ef397

    • SHA1

      c2ed10a3fc906d46450dbcfe082a1f351732c973

    • SHA256

      32e15aa26a62761a64dfac28e63e8407c124ce2f823d9c5b67a8365ed902d0b8

    • SHA512

      c2a1c02b7b2261b9e962102317dd3eb102db5e59aabac77fed6c39747e80bf5fec3975f27ef018f7ea673c4ecf899cc2e0130d6be19f2ff9c7a42431828e5d38

    • SSDEEP

      98304:DUo2jCVAvzvcI06rDWGe+i5Ca6Tt2Sk29seCQdwr783Q0h4gkQ33zcFNHx2I:raCVALER6rmd5lSkebw03Hh4XQ33mR2I

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks