Overview

overview

7

Static

static

7

cfb41b0c68...18.exe

windows7-x64

7

cfb41b0c68...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cfb41b0c68228fa0570bfd3dd412adf4_JaffaCakes118

  • Size

    395KB

  • Sample

    240906-rdd63s1cmh

  • MD5

    cfb41b0c68228fa0570bfd3dd412adf4

  • SHA1

    3f28858afae9878b1a1d8d1a685afab60a5f91e3

  • SHA256

    12430acdfbb50c4ba1d4fb4e456977890e3025866e9171cd5f5ec4c2551717da

  • SHA512

    7a31cc48662ddbcf39d2a21c89dc9a87c24c4d6ba3ab6957ff3e6ce5c3167c3f6a33c02b75184c86c6ef6c9034c3ca38d7a05fb022db9098464db5a9ce9270f4

  • SSDEEP

    6144:hkW9ycvhT/fTZeaphIK6KgL9sYqshPuGAjg9C9qYiCaTMf4kRHJU4QHxTKv+:hkkR/fcqhIK9u5qXGAjgsinMf4TR

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      cfb41b0c68228fa0570bfd3dd412adf4_JaffaCakes118

    • Size

      395KB

    • MD5

      cfb41b0c68228fa0570bfd3dd412adf4

    • SHA1

      3f28858afae9878b1a1d8d1a685afab60a5f91e3

    • SHA256

      12430acdfbb50c4ba1d4fb4e456977890e3025866e9171cd5f5ec4c2551717da

    • SHA512

      7a31cc48662ddbcf39d2a21c89dc9a87c24c4d6ba3ab6957ff3e6ce5c3167c3f6a33c02b75184c86c6ef6c9034c3ca38d7a05fb022db9098464db5a9ce9270f4

    • SSDEEP

      6144:hkW9ycvhT/fTZeaphIK6KgL9sYqshPuGAjg9C9qYiCaTMf4kRHJU4QHxTKv+:hkkR/fcqhIK9u5qXGAjgsinMf4TR

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks