Overview

overview

7

Static

static

3

a41a83f707...18.exe

windows7-x64

7

a41a83f707...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a41a83f70728137fa3ce0e107a8c2697_JaffaCakes118

  • Size

    2.4MB

  • Sample

    240817-znfrnawdrd

  • MD5

    a41a83f70728137fa3ce0e107a8c2697

  • SHA1

    98265b1165aa125913b49468c431353801da5392

  • SHA256

    5058eca15589c67685fe21c34d6a4e14da0778e7e9920ef2e8984a97ab069aa3

  • SHA512

    1e3d953ea7f8c46a760eca04596bc6b39bc77fd16df8920f0aa3abc601152faa19fbde51b62b42651b009d95046dea1839d0fe41204a4f16d1dc85d5308887b9

  • SSDEEP

    49152:WgCh1LGumhuW+rXg+TTplJQ/Agx5HV0VO+5AQF:rCPbTnJ8sX

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      a41a83f70728137fa3ce0e107a8c2697_JaffaCakes118

    • Size

      2.4MB

    • MD5

      a41a83f70728137fa3ce0e107a8c2697

    • SHA1

      98265b1165aa125913b49468c431353801da5392

    • SHA256

      5058eca15589c67685fe21c34d6a4e14da0778e7e9920ef2e8984a97ab069aa3

    • SHA512

      1e3d953ea7f8c46a760eca04596bc6b39bc77fd16df8920f0aa3abc601152faa19fbde51b62b42651b009d95046dea1839d0fe41204a4f16d1dc85d5308887b9

    • SSDEEP

      49152:WgCh1LGumhuW+rXg+TTplJQ/Agx5HV0VO+5AQF:rCPbTnJ8sX

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks