Overview

overview

8

Static

static

7

d522b6e484...18.exe

windows7-x64

8

d522b6e484...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d522b6e4841a5ce81770f6ed3d605ac2_JaffaCakes118

  • Size

    21KB

  • Sample

    240908-1kcfhawhjj

  • MD5

    d522b6e4841a5ce81770f6ed3d605ac2

  • SHA1

    e2cbefc9df4bade5156e62b0c18aa12390457464

  • SHA256

    d81d56f9b15c260a71c1d2041895f5e99bd6bff4a13291ead88fd8e441b9ab87

  • SHA512

    af3ffdf453118e48d6a71a4718badb5e7d64a2869eb2288d2f6783d181df1d2dab876bedb44c6206874f6fbbde90cd43eb6c104898e19e11d73c70363ddbce69

  • SSDEEP

    384:Rr9sOcIp6wRcsSYLvKWLWbstQTid6HJyraXkqdkJ7PNWoq/AEn0oaNJawcudoD7s:RmOhplcsHvKWzX6HJmFqda7koqIE0BnZ

Score
8/10
discoveryevasionupx

Malware Config

Targets

    • Target

      d522b6e4841a5ce81770f6ed3d605ac2_JaffaCakes118

    • Size

      21KB

    • MD5

      d522b6e4841a5ce81770f6ed3d605ac2

    • SHA1

      e2cbefc9df4bade5156e62b0c18aa12390457464

    • SHA256

      d81d56f9b15c260a71c1d2041895f5e99bd6bff4a13291ead88fd8e441b9ab87

    • SHA512

      af3ffdf453118e48d6a71a4718badb5e7d64a2869eb2288d2f6783d181df1d2dab876bedb44c6206874f6fbbde90cd43eb6c104898e19e11d73c70363ddbce69

    • SSDEEP

      384:Rr9sOcIp6wRcsSYLvKWLWbstQTid6HJyraXkqdkJ7PNWoq/AEn0oaNJawcudoD7s:RmOhplcsHvKWzX6HJmFqda7koqIE0BnZ

    Score
    8/10
    discoveryevasionupx

    • Disables Task Manager via registry modification

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks