Overview

overview

10

Static

static

3

b0fd2b536b...18.exe

windows7-x64

10

b0fd2b536b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b0fd2b536b896799d93e33213b6e89b4_JaffaCakes118

  • Size

    9.3MB

  • Sample

    240820-1texzsyhkm

  • MD5

    b0fd2b536b896799d93e33213b6e89b4

  • SHA1

    ffd9eb54eda096d0028be0670b00a41d06409c9a

  • SHA256

    e6b2b88c96e371e9484d6a4c64e5d6cbb36137120a1339c294583468fd50f976

  • SHA512

    5a9587d343519cb3bdefe4a6f4d0126a94aebddc12f4a46879d0a5b40a966621b37c2608cd5f54fef1cbaf3b8f72792d8d6082b8f543eef9b354edf5bed60308

  • SSDEEP

    3072:B8R4d9xc8/L+Q+G2yDtajDzQ4GT76Q8BBHEY0oJNx13As35XCKjSiILK7HbS8OaX:Blc4+Q+GKs41gLd

Score
10/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      b0fd2b536b896799d93e33213b6e89b4_JaffaCakes118

    • Size

      9.3MB

    • MD5

      b0fd2b536b896799d93e33213b6e89b4

    • SHA1

      ffd9eb54eda096d0028be0670b00a41d06409c9a

    • SHA256

      e6b2b88c96e371e9484d6a4c64e5d6cbb36137120a1339c294583468fd50f976

    • SHA512

      5a9587d343519cb3bdefe4a6f4d0126a94aebddc12f4a46879d0a5b40a966621b37c2608cd5f54fef1cbaf3b8f72792d8d6082b8f543eef9b354edf5bed60308

    • SSDEEP

      3072:B8R4d9xc8/L+Q+G2yDtajDzQ4GT76Q8BBHEY0oJNx13As35XCKjSiILK7HbS8OaX:Blc4+Q+GKs41gLd

    Score
    10/10
    defense_evasiondiscoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Hide Artifacts: Hidden Files and Directories

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks