Overview

overview

8

Static

static

8

da95e3feb6...18.exe

windows7-x64

7

da95e3feb6...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da95e3feb6a5a4f64a5f1c76bc5bf478_JaffaCakes118

  • Size

    42KB

  • Sample

    240911-r9pmpaxbjg

  • MD5

    da95e3feb6a5a4f64a5f1c76bc5bf478

  • SHA1

    d71e7eb56840c2099159b5d912099c1936ec8189

  • SHA256

    d66d496c2b91cc2cd8db68aa68d9e0d6d9e2c96a9b3ecf1ae69732d6e74723ac

  • SHA512

    085036740cc5d7134759345ff751328477dea9bbed3e2f8973a6c5e729227932e65afd911ca2e9d3371c6ba716cf0cefd4cc3d5a7ac0571b1c709c17171b7a89

  • SSDEEP

    384:U65FZdgAkTiM79mgLeBDssn7bCcz/74aNJawcudoD7UjdS3beM4mxj:Uw3M7YueSsn7b9/NnbcuyD7Uhzk

Score
8/10
discoveryupx

Malware Config

Targets

    • Target

      da95e3feb6a5a4f64a5f1c76bc5bf478_JaffaCakes118

    • Size

      42KB

    • MD5

      da95e3feb6a5a4f64a5f1c76bc5bf478

    • SHA1

      d71e7eb56840c2099159b5d912099c1936ec8189

    • SHA256

      d66d496c2b91cc2cd8db68aa68d9e0d6d9e2c96a9b3ecf1ae69732d6e74723ac

    • SHA512

      085036740cc5d7134759345ff751328477dea9bbed3e2f8973a6c5e729227932e65afd911ca2e9d3371c6ba716cf0cefd4cc3d5a7ac0571b1c709c17171b7a89

    • SSDEEP

      384:U65FZdgAkTiM79mgLeBDssn7bCcz/74aNJawcudoD7UjdS3beM4mxj:Uw3M7YueSsn7b9/NnbcuyD7Uhzk

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks