Overview

overview

10

Static

static

5

f5b4a6cac6...18.exe

windows7-x64

10

f5b4a6cac6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5b4a6cac614137779f807349ed94bde_JaffaCakes118

  • Size

    36KB

  • Sample

    240925-lf2r9s1bra

  • MD5

    f5b4a6cac614137779f807349ed94bde

  • SHA1

    1b38d34beda0bab629dba9214ff53c009420a6aa

  • SHA256

    d1ad982fd721086ac7b3d1c7ee0518905bf47267fd7d8714482e11795719d09b

  • SHA512

    e366aa7ea659023551adcf4ac1e4644fc8653278a35a0f6c56afcbadde84595ecabd254cda53fade27cfa43ff2e809cf3b19c347c392b77ad6eceebc4fd22c3b

  • SSDEEP

    768:lgLGWz+ow/tSMKEWVRyyUcChtqqY1DdJwZq2Z5D2p:lgLGzowhqyyJCzojuq2Xy

Score
10/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      f5b4a6cac614137779f807349ed94bde_JaffaCakes118

    • Size

      36KB

    • MD5

      f5b4a6cac614137779f807349ed94bde

    • SHA1

      1b38d34beda0bab629dba9214ff53c009420a6aa

    • SHA256

      d1ad982fd721086ac7b3d1c7ee0518905bf47267fd7d8714482e11795719d09b

    • SHA512

      e366aa7ea659023551adcf4ac1e4644fc8653278a35a0f6c56afcbadde84595ecabd254cda53fade27cfa43ff2e809cf3b19c347c392b77ad6eceebc4fd22c3b

    • SSDEEP

      768:lgLGWz+ow/tSMKEWVRyyUcChtqqY1DdJwZq2Z5D2p:lgLGzowhqyyJCzojuq2Xy

    Score
    10/10
    discoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks