Overview

overview

7

Static

static

7

aa68574295...18.exe

windows7-x64

7

aa68574295...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa6857429542fbafca9b461df9cc20a6_JaffaCakes118

  • Size

    91KB

  • Sample

    240819-k36t3avhjf

  • MD5

    aa6857429542fbafca9b461df9cc20a6

  • SHA1

    d587b1a9ce1f1605ed9443bc2f5c3fb9eddaf7bb

  • SHA256

    1e553de39bbdbe5607113267cf570ae2b602c2f1fe03a4b57aa07e122ed5b0de

  • SHA512

    8c851101ce20d2f06e53607fbe86dfbd0cf9e596f87afa24852247f0f7bc3f10c22cc7c979d3159aa7037a360847bcb22f787f96816b7bc8b7ee4d54212efc31

  • SSDEEP

    1536:nnTXR4rGSuIG1zfGiE9b+fHCVouAcsGbpumeD2A7KUQ1mqP4Eh:nnTG+DzOiE54zcswgDreUQfth

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      aa6857429542fbafca9b461df9cc20a6_JaffaCakes118

    • Size

      91KB

    • MD5

      aa6857429542fbafca9b461df9cc20a6

    • SHA1

      d587b1a9ce1f1605ed9443bc2f5c3fb9eddaf7bb

    • SHA256

      1e553de39bbdbe5607113267cf570ae2b602c2f1fe03a4b57aa07e122ed5b0de

    • SHA512

      8c851101ce20d2f06e53607fbe86dfbd0cf9e596f87afa24852247f0f7bc3f10c22cc7c979d3159aa7037a360847bcb22f787f96816b7bc8b7ee4d54212efc31

    • SSDEEP

      1536:nnTXR4rGSuIG1zfGiE9b+fHCVouAcsGbpumeD2A7KUQ1mqP4Eh:nnTG+DzOiE54zcswgDreUQfth

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks