Overview

overview

7

Static

static

7

bb63f8ef67...18.exe

windows7-x64

7

bb63f8ef67...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    bb63f8ef679d254a655a882ec95108d7_JaffaCakes118

  • Size

    188KB

  • Sample

    240823-mp3llayhkd

  • MD5

    bb63f8ef679d254a655a882ec95108d7

  • SHA1

    2a65d54ee43a8847638c740b4521c3232ad9a3b7

  • SHA256

    f7db3ec69061a8eae4038ac320be70b0bb645c162cab77a2ed1da5e99154ccd2

  • SHA512

    e3c32dec5fa7176e105dd6bc6cfa87637ed6b16815906affeb8021a640d516563f7ca50c0a596e8a745f45351fd3d61f8a67e3d9d4ef44ed11a9c2ec52fe7f5a

  • SSDEEP

    3072:uH35tmKgQ+IyAFXWPNG8mRTafS5LzdFZeO2AeSyKaNpyViXz5Ohh4NncpOJv8hx6:+tGQ+sFGDmRTafe1epAebHpyVkkMNncw

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      bb63f8ef679d254a655a882ec95108d7_JaffaCakes118

    • Size

      188KB

    • MD5

      bb63f8ef679d254a655a882ec95108d7

    • SHA1

      2a65d54ee43a8847638c740b4521c3232ad9a3b7

    • SHA256

      f7db3ec69061a8eae4038ac320be70b0bb645c162cab77a2ed1da5e99154ccd2

    • SHA512

      e3c32dec5fa7176e105dd6bc6cfa87637ed6b16815906affeb8021a640d516563f7ca50c0a596e8a745f45351fd3d61f8a67e3d9d4ef44ed11a9c2ec52fe7f5a

    • SSDEEP

      3072:uH35tmKgQ+IyAFXWPNG8mRTafS5LzdFZeO2AeSyKaNpyViXz5Ohh4NncpOJv8hx6:+tGQ+sFGDmRTafe1epAebHpyVkkMNncw

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks