Overview

overview

7

Static

static

7

abe20ecb96...18.exe

windows7-x64

7

abe20ecb96...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    abe20ecb96d8de6c9629d0d7396a4a2c_JaffaCakes118

  • Size

    176KB

  • Sample

    240819-vtrnwszfmq

  • MD5

    abe20ecb96d8de6c9629d0d7396a4a2c

  • SHA1

    863a6cedd9398e062b7f3b12b796ca49dc41ed46

  • SHA256

    f91c02316025e49c1799acf3c0375ee371d4d50825d0b7c1b4976c69755443f4

  • SHA512

    0f10d56195c8199f9e4af58170e811d2692983e6116f62eb238d241a6e8329eee6a712e097d1c975fabe3ffca80b83b373395df82e6769cca812a597816a710a

  • SSDEEP

    384:MQiplabVjg8Ruuks1CGX+7zj5tgXgUKgbyQMGuwQ:SlabVjgTuX+7z3hUyQqw

Score
7/10
defense_evasiondiscoveryupx

Malware Config

Targets

    • Target

      abe20ecb96d8de6c9629d0d7396a4a2c_JaffaCakes118

    • Size

      176KB

    • MD5

      abe20ecb96d8de6c9629d0d7396a4a2c

    • SHA1

      863a6cedd9398e062b7f3b12b796ca49dc41ed46

    • SHA256

      f91c02316025e49c1799acf3c0375ee371d4d50825d0b7c1b4976c69755443f4

    • SHA512

      0f10d56195c8199f9e4af58170e811d2692983e6116f62eb238d241a6e8329eee6a712e097d1c975fabe3ffca80b83b373395df82e6769cca812a597816a710a

    • SSDEEP

      384:MQiplabVjg8Ruuks1CGX+7zj5tgXgUKgbyQMGuwQ:SlabVjgTuX+7z3hUyQqw

    Score
    7/10
    defense_evasiondiscoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks