1affc939df115c4586eff218d19485a5401bb5bf94836eb5a077223665e8940b | Triage

Submit
Reports

Overview

overview

Static

static

5

f9c8ba94b2...18.exe

windows7-x64

f9c8ba94b2...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

f9c8ba94b2633b52c2ae55374e97e2d7_JaffaCakes118
Size

152KB
Sample

240927-fyvh1szdrc
MD5

f9c8ba94b2633b52c2ae55374e97e2d7
SHA1

1aa2499df3c45e2e8bdcef3e0bb2b1ca4d31ee96
SHA256

1affc939df115c4586eff218d19485a5401bb5bf94836eb5a077223665e8940b
SHA512

b010872ad3e44f4612af8b3454d14bb85321b22c0b975e2b8fff6999b0fd5c114d60b4f34d8c4b65ce0280a3b58311e38b2469d54fa6737204141cad3771355b
SSDEEP

3072:pOzm+qhJS8oN+nuz29v80N6V3lDBIa5JoL5QmVzfAa3M:gco4nuqvolDBHOL5

Score

10^/10

defense_evasion discovery persistence upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

f9c8ba94b2633b52c2ae55374e97e2d7_JaffaCakes118.exe

Resource

win7-20240903-en

defense_evasion discovery persistence upx

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

f9c8ba94b2633b52c2ae55374e97e2d7_JaffaCakes118.exe

Resource

win10v2004-20240802-en

defense_evasion discovery persistence upx

windows10-2004-x64

9 signatures

150 seconds

Malware Config

Targets

- Target
  
  f9c8ba94b2633b52c2ae55374e97e2d7_JaffaCakes118
- Size
  
  152KB
- MD5
  
  f9c8ba94b2633b52c2ae55374e97e2d7
- SHA1
  
  1aa2499df3c45e2e8bdcef3e0bb2b1ca4d31ee96
- SHA256
  
  1affc939df115c4586eff218d19485a5401bb5bf94836eb5a077223665e8940b
- SHA512
  
  b010872ad3e44f4612af8b3454d14bb85321b22c0b975e2b8fff6999b0fd5c114d60b4f34d8c4b65ce0280a3b58311e38b2469d54fa6737204141cad3771355b
- SSDEEP
  
  3072:pOzm+qhJS8oN+nuz29v80N6V3lDBIa5JoL5QmVzfAa3M:gco4nuqvolDBHOL5
Score

10^/10

defense_evasion discovery persistence upx
- Modifies WinLogon for persistence
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Hide Artifacts: Hidden Files and Directories
  defense_evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceupx

behavioral2

defense_evasiondiscoverypersistenceupx

© 2018-2025

Terms | Privacy