Overview

overview

10

Static

static

7

df130b6419...18.exe

windows7-x64

10

df130b6419...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    df130b641965edeb9053120f26c6b892_JaffaCakes118

  • Size

    112KB

  • Sample

    240913-275k8svajq

  • MD5

    df130b641965edeb9053120f26c6b892

  • SHA1

    50612c4a969ec3e9e319072f42924390dbcb2b1d

  • SHA256

    0eaad80f68afdb089946edb5a616b644500bbca3044040368178d7f404140a85

  • SHA512

    663ae22d008c680972f6d5adde8f1b5f458223c6ff720cc82b78ccd2da43534d70fad93b08acf449cdaf62e1252c0445b83eb24fbc9199aef7f48918004b9a43

  • SSDEEP

    1536:g/2Pf1qfcthM0MogVwhGM/+tEheOpHcOv1TRmynb65UHiQ/SW+rwS0IcR:gg4fwh+YGMRzfnb6GC+SW+rrGR

Score
10/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      df130b641965edeb9053120f26c6b892_JaffaCakes118

    • Size

      112KB

    • MD5

      df130b641965edeb9053120f26c6b892

    • SHA1

      50612c4a969ec3e9e319072f42924390dbcb2b1d

    • SHA256

      0eaad80f68afdb089946edb5a616b644500bbca3044040368178d7f404140a85

    • SHA512

      663ae22d008c680972f6d5adde8f1b5f458223c6ff720cc82b78ccd2da43534d70fad93b08acf449cdaf62e1252c0445b83eb24fbc9199aef7f48918004b9a43

    • SSDEEP

      1536:g/2Pf1qfcthM0MogVwhGM/+tEheOpHcOv1TRmynb65UHiQ/SW+rwS0IcR:gg4fwh+YGMRzfnb6GC+SW+rrGR

    Score
    10/10
    defense_evasiondiscoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Hide Artifacts: Hidden Files and Directories

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks