Overview

overview

7

Static

static

1

c93e47159c...18.exe

windows7-x64

7

c93e47159c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c93e47159c9dcb5fe81774c6987ce5f1_JaffaCakes118

  • Size

    2.0MB

  • Sample

    240829-vjhy1asamc

  • MD5

    c93e47159c9dcb5fe81774c6987ce5f1

  • SHA1

    6f47bb4ab104cf3b27441034acd2b1da46d5ee27

  • SHA256

    16cdf00083b80eba5bf6ac0572e357c68447d0fb88946e0db9392b1c65450506

  • SHA512

    752383d90e76b090567fa12d53c767da5c8f4548cf19a9d1aaaf1367b3d45270d5dd05af3b3d8871bf50fb57b9b860cdae4484fb33655c2e1e575917ed07f478

  • SSDEEP

    49152:cp4bK1RXKLNbTChxKCnFnQXBbrtgb/iQvu0UHOyM:cy+eLN6hxvWbrtUTrUHOD

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      c93e47159c9dcb5fe81774c6987ce5f1_JaffaCakes118

    • Size

      2.0MB

    • MD5

      c93e47159c9dcb5fe81774c6987ce5f1

    • SHA1

      6f47bb4ab104cf3b27441034acd2b1da46d5ee27

    • SHA256

      16cdf00083b80eba5bf6ac0572e357c68447d0fb88946e0db9392b1c65450506

    • SHA512

      752383d90e76b090567fa12d53c767da5c8f4548cf19a9d1aaaf1367b3d45270d5dd05af3b3d8871bf50fb57b9b860cdae4484fb33655c2e1e575917ed07f478

    • SSDEEP

      49152:cp4bK1RXKLNbTChxKCnFnQXBbrtgb/iQvu0UHOyM:cy+eLN6hxvWbrtUTrUHOD

    Score
    7/10
    discoveryupxpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks