Overview

overview

7

Static

static

7

b604567d9f...18.exe

windows7-x64

7

b604567d9f...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b604567d9f4fd6472d6c6e7529347202_JaffaCakes118

  • Size

    29KB

  • Sample

    240822-c1b8nsxgrm

  • MD5

    b604567d9f4fd6472d6c6e7529347202

  • SHA1

    f9a4b7b2dba6e937f6b62fce79b03eebf4f03f75

  • SHA256

    86914731b3297494adc123ebec0872a0d350689b6ffd2056e9f4b87399370cce

  • SHA512

    182c4e979350e5d73b01c8ea2a196014d3889cf8fd290ef67e9ccc30f4389c217d030a4f93c574b2ee99b9c06782dadb5e4a33e7ab74f6f22a50dcfb5498b7a0

  • SSDEEP

    384:83i5nnYyYBrW7vJassx/zmnYdFh2tictFM/hMh3LycN6d19BK6kMYMk//jj/wt92:D5oh6JassJstiQFeWya6dgfMM//ILx

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      b604567d9f4fd6472d6c6e7529347202_JaffaCakes118

    • Size

      29KB

    • MD5

      b604567d9f4fd6472d6c6e7529347202

    • SHA1

      f9a4b7b2dba6e937f6b62fce79b03eebf4f03f75

    • SHA256

      86914731b3297494adc123ebec0872a0d350689b6ffd2056e9f4b87399370cce

    • SHA512

      182c4e979350e5d73b01c8ea2a196014d3889cf8fd290ef67e9ccc30f4389c217d030a4f93c574b2ee99b9c06782dadb5e4a33e7ab74f6f22a50dcfb5498b7a0

    • SSDEEP

      384:83i5nnYyYBrW7vJassx/zmnYdFh2tictFM/hMh3LycN6d19BK6kMYMk//jj/wt92:D5oh6JassJstiQFeWya6dgfMM//ILx

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks