Overview

overview

7

Static

static

7

affa3227d8...18.exe

windows7-x64

7

affa3227d8...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    affa3227d8cba9edaa2a5d94d4a5d417_JaffaCakes118

  • Size

    248KB

  • Sample

    240820-t1xm2swdlq

  • MD5

    affa3227d8cba9edaa2a5d94d4a5d417

  • SHA1

    1804dea6fe18e3854a03085b3288ac1b0362fe7f

  • SHA256

    3d9986ebaf9daae60200872307e3f50cfa91c0d3657bd0479bdbb75d7b769956

  • SHA512

    9e47cfca72e18181a1524be2f2d0a9b8f1748c1b4172c0c7899ede59b91036a89523e6aa31475101618006d0cd394a64a6de1cf8c5047a4d16c07b3358f610ed

  • SSDEEP

    3072:DgJ7l58ibCW7XjT7kcno3cDOMTmrxnX784wILsaqX5MKi9Q/w0ee+iu:8VlLT7YcCrxX784ze5MRUwm

Score
7/10
discoverythemida

Malware Config

Targets

    • Target

      affa3227d8cba9edaa2a5d94d4a5d417_JaffaCakes118

    • Size

      248KB

    • MD5

      affa3227d8cba9edaa2a5d94d4a5d417

    • SHA1

      1804dea6fe18e3854a03085b3288ac1b0362fe7f

    • SHA256

      3d9986ebaf9daae60200872307e3f50cfa91c0d3657bd0479bdbb75d7b769956

    • SHA512

      9e47cfca72e18181a1524be2f2d0a9b8f1748c1b4172c0c7899ede59b91036a89523e6aa31475101618006d0cd394a64a6de1cf8c5047a4d16c07b3358f610ed

    • SSDEEP

      3072:DgJ7l58ibCW7XjT7kcno3cDOMTmrxnX784wILsaqX5MKi9Q/w0ee+iu:8VlLT7YcCrxX784ze5MRUwm

    Score
    7/10
    discoverythemida

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks