Overview

overview

7

Static

static

3

d2c1b30c57...18.exe

windows7-x64

7

d2c1b30c57...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d2c1b30c57e8a4b2c449aa6c48cd802b_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240907-y2wjlasfpm

  • MD5

    d2c1b30c57e8a4b2c449aa6c48cd802b

  • SHA1

    ea448bbb0cf686c9ce1875eb68014aec33858e9a

  • SHA256

    f64676d7c48712c433c73e3225645bba94ae82ae0412c91cfae00e0f3fed3988

  • SHA512

    10582ba932383ea938d72ea11f4138cfb35c85ec054daf66a565db5e770117ee1da1b373a51d7a6d595a58feea75b333b5b2aee562805171619339182cc20af9

  • SSDEEP

    24576:eMFYGY9+9d/G7P9lkQ/exnzGn4dLsUvqkaT+0BpCCh+PDedNdUhZuIBWc0AXM:KN26FOnzGn6LJvqkwnpC+mWd6uIcc0T

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      d2c1b30c57e8a4b2c449aa6c48cd802b_JaffaCakes118

    • Size

      1.7MB

    • MD5

      d2c1b30c57e8a4b2c449aa6c48cd802b

    • SHA1

      ea448bbb0cf686c9ce1875eb68014aec33858e9a

    • SHA256

      f64676d7c48712c433c73e3225645bba94ae82ae0412c91cfae00e0f3fed3988

    • SHA512

      10582ba932383ea938d72ea11f4138cfb35c85ec054daf66a565db5e770117ee1da1b373a51d7a6d595a58feea75b333b5b2aee562805171619339182cc20af9

    • SSDEEP

      24576:eMFYGY9+9d/G7P9lkQ/exnzGn4dLsUvqkaT+0BpCCh+PDedNdUhZuIBWc0AXM:KN26FOnzGn6LJvqkwnpC+mWd6uIcc0T

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks