Overview

overview

7

Static

static

7

b1c4dd2d62...18.exe

windows7-x64

7

b1c4dd2d62...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b1c4dd2d62d8c8beb9a03da4918058e8_JaffaCakes118

  • Size

    31KB

  • Sample

    240821-ctfmhszajl

  • MD5

    b1c4dd2d62d8c8beb9a03da4918058e8

  • SHA1

    75ef91d08f22017688ef547580b0351b23d45b9a

  • SHA256

    ea30037c2d0d863fe01850f4c613948100a515cd0a52b687c1568c18b308e511

  • SHA512

    67282b758f07f8e2bbd9b809d2b8fccc174adacadf163b62b68c4432e4fe581e33ae809315648c1b4c66b89dae35910f8eea9f86e9e66211c296e54bb81fa7d0

  • SSDEEP

    768:mFkNq6p7sr4n0+WMyjfk8c1+YQNt6eRAflKMMQQS:M6raq0FM4k9khMpMB

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      b1c4dd2d62d8c8beb9a03da4918058e8_JaffaCakes118

    • Size

      31KB

    • MD5

      b1c4dd2d62d8c8beb9a03da4918058e8

    • SHA1

      75ef91d08f22017688ef547580b0351b23d45b9a

    • SHA256

      ea30037c2d0d863fe01850f4c613948100a515cd0a52b687c1568c18b308e511

    • SHA512

      67282b758f07f8e2bbd9b809d2b8fccc174adacadf163b62b68c4432e4fe581e33ae809315648c1b4c66b89dae35910f8eea9f86e9e66211c296e54bb81fa7d0

    • SSDEEP

      768:mFkNq6p7sr4n0+WMyjfk8c1+YQNt6eRAflKMMQQS:M6raq0FM4k9khMpMB

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks