Overview

overview

7

Static

static

3

ce527fe0ca...18.exe

windows7-x64

1

ce527fe0ca...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce527fe0caa6ad23d9610fd1cd522ae0_JaffaCakes118

  • Size

    94KB

  • Sample

    240906-bp3qtayfnc

  • MD5

    ce527fe0caa6ad23d9610fd1cd522ae0

  • SHA1

    eee4577e04b5b7ce196182aa9dc3fe1cd84c85ce

  • SHA256

    d5e02fdb7f2000789725601bedc2654b412acd771cf9e661b176d5695ffa9560

  • SHA512

    b77b471208a19339c0e4d9bb073e3c64bef30b16e2153b0c9211d20f331dba9acd3aa27ced63b8d608158a581631fadfdf53b911813c54950f0edee58a198bf4

  • SSDEEP

    1536:RBQeWQq4lUgctfbruQhl50v/lTqqUQyp+Lc1mr9dPUvDpunkIq44p1RdFRbk5:MeHq4utfbrDkvxc6c1mhBULpunkF1y

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      ce527fe0caa6ad23d9610fd1cd522ae0_JaffaCakes118

    • Size

      94KB

    • MD5

      ce527fe0caa6ad23d9610fd1cd522ae0

    • SHA1

      eee4577e04b5b7ce196182aa9dc3fe1cd84c85ce

    • SHA256

      d5e02fdb7f2000789725601bedc2654b412acd771cf9e661b176d5695ffa9560

    • SHA512

      b77b471208a19339c0e4d9bb073e3c64bef30b16e2153b0c9211d20f331dba9acd3aa27ced63b8d608158a581631fadfdf53b911813c54950f0edee58a198bf4

    • SSDEEP

      1536:RBQeWQq4lUgctfbruQhl50v/lTqqUQyp+Lc1mr9dPUvDpunkIq44p1RdFRbk5:MeHq4utfbrDkvxc6c1mhBULpunkF1y

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks