Overview

overview

7

Static

static

7

dc190ebf11...18.exe

windows7-x64

7

dc190ebf11...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    dc190ebf11914c98b36de1324ad2967c_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240912-jt754ayfld

  • MD5

    dc190ebf11914c98b36de1324ad2967c

  • SHA1

    87a84ab16209c1097569bdd6a5cc5894ad357a88

  • SHA256

    c51b7037122f43021b14c73d287a1ac0bde626e63ef97e1b5a2423477e5df543

  • SHA512

    6645f4c7162ccc5b2022909fc5b18b0c0bee9ab8341fd0f90ef0553680a1bf2df8cf553d32d4c8d7f20648157536a645423fea726d5cbb108b2a61c4ca721238

  • SSDEEP

    24576:iD3euKmLCkWZ94oPcHTrlQzSraIKu78ThO3pEUaUTV4s:03+pFv4oEHXLaI8KaUT

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      dc190ebf11914c98b36de1324ad2967c_JaffaCakes118

    • Size

      1.0MB

    • MD5

      dc190ebf11914c98b36de1324ad2967c

    • SHA1

      87a84ab16209c1097569bdd6a5cc5894ad357a88

    • SHA256

      c51b7037122f43021b14c73d287a1ac0bde626e63ef97e1b5a2423477e5df543

    • SHA512

      6645f4c7162ccc5b2022909fc5b18b0c0bee9ab8341fd0f90ef0553680a1bf2df8cf553d32d4c8d7f20648157536a645423fea726d5cbb108b2a61c4ca721238

    • SSDEEP

      24576:iD3euKmLCkWZ94oPcHTrlQzSraIKu78ThO3pEUaUTV4s:03+pFv4oEHXLaI8KaUT

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks