Overview

overview

10

Static

static

7

a0105c6ab8...18.exe

windows7-x64

10

a0105c6ab8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a0105c6ab812844353e357c9ecbc105d_JaffaCakes118

  • Size

    957KB

  • Sample

    240816-1nxkvasfkm

  • MD5

    a0105c6ab812844353e357c9ecbc105d

  • SHA1

    ef5f4bab7171161fc6f23fe22bfa9e97c31f3aa8

  • SHA256

    ddd3f56b7d57c1178c4684027b326c3df10787d6f90baff3d3237b429334f6cb

  • SHA512

    ddf656580edb879643cba739c655647a3d8fd2ebe73c3e603300007087618cd2242517a1617d50993aaca9a19a8712a9084b7b639054873d02071d540c8b24fe

  • SSDEEP

    24576:66P9dgXF1lz4HqrqCEpsKe7XO2JFUc7w81qdZwC:66VeFujXGKe7XO2JicUx

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      a0105c6ab812844353e357c9ecbc105d_JaffaCakes118

    • Size

      957KB

    • MD5

      a0105c6ab812844353e357c9ecbc105d

    • SHA1

      ef5f4bab7171161fc6f23fe22bfa9e97c31f3aa8

    • SHA256

      ddd3f56b7d57c1178c4684027b326c3df10787d6f90baff3d3237b429334f6cb

    • SHA512

      ddf656580edb879643cba739c655647a3d8fd2ebe73c3e603300007087618cd2242517a1617d50993aaca9a19a8712a9084b7b639054873d02071d540c8b24fe

    • SSDEEP

      24576:66P9dgXF1lz4HqrqCEpsKe7XO2JFUc7w81qdZwC:66VeFujXGKe7XO2JicUx

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks