698be73c3d139e54d1b9c366749c3b4198dcacb1573dd57743d8bab63047e7fd | Triage

Submit
Reports

Overview

overview

7

Static

static

3

e9fdaa4cd8...18.exe

windows7-x64

7

e9fdaa4cd8...18.exe

windows10-2004-x64

7

Sharing

General

Target

e9fdaa4cd8faa60d261d66bc8a7a64ca_JaffaCakes118
Size

58KB
Sample

240918-z6mypatdpc
MD5

e9fdaa4cd8faa60d261d66bc8a7a64ca
SHA1

25bbdeef4c1918af08298d28ef2f12f6389d79f0
SHA256

698be73c3d139e54d1b9c366749c3b4198dcacb1573dd57743d8bab63047e7fd
SHA512

05100ed3dd1d0908c204ddda0777be6474984815457f508203fa1af813c2566455e57aa1ba95bd3cd8b1721366ca333f790e999acc2110da5fbf2983c97582fc
SSDEEP

1536:RB4/pzEWGXl9TFxNqCplCcrEL00TGUOgtP3Liwo:3QEWqDNplf008GU7x3uwo

Score

7^/10

defense_evasion discovery upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

e9fdaa4cd8faa60d261d66bc8a7a64ca_JaffaCakes118.exe

Resource

win7-20240903-en

defense_evasion discovery upx

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

e9fdaa4cd8faa60d261d66bc8a7a64ca_JaffaCakes118.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  e9fdaa4cd8faa60d261d66bc8a7a64ca_JaffaCakes118
- Size
  
  58KB
- MD5
  
  e9fdaa4cd8faa60d261d66bc8a7a64ca
- SHA1
  
  25bbdeef4c1918af08298d28ef2f12f6389d79f0
- SHA256
  
  698be73c3d139e54d1b9c366749c3b4198dcacb1573dd57743d8bab63047e7fd
- SHA512
  
  05100ed3dd1d0908c204ddda0777be6474984815457f508203fa1af813c2566455e57aa1ba95bd3cd8b1721366ca333f790e999acc2110da5fbf2983c97582fc
- SSDEEP
  
  1536:RB4/pzEWGXl9TFxNqCplCcrEL00TGUOgtP3Liwo:3QEWqDNplf008GU7x3uwo
Score

7^/10

defense_evasion discovery upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Indicator Removal: File Deletion
  Adversaries may delete files left behind by the actions of their intrusion activity.
  defense_evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Indicator Removal

File Deletion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoveryupx

behavioral2

© 2018-2024

Terms | Privacy