Overview

overview

7

Static

static

5

0d78ac5b97...18.exe

windows7-x64

7

0d78ac5b97...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d78ac5b9781c5c8e45e604adb6aad53_JaffaCakes118

  • Size

    89KB

  • Sample

    241003-ctfmhstcme

  • MD5

    0d78ac5b9781c5c8e45e604adb6aad53

  • SHA1

    ce9e7a628019a5fb59787515968824c39559d58f

  • SHA256

    a866ece54a8608394d8019d4786ad943f3f42a0685c4dc7b085621bb8d8c1f98

  • SHA512

    3b712bf801b42427c5f3524259dcbbc7c9a2ed6bc87fa1af35347c8feda2df92a4cd2d8e4f60fb2eaa8b77d650e46fc0c0b115ddb07886d1b7ee7555a01cbb78

  • SSDEEP

    1536:6mi+xxdgF45E4h2Hnq8OFnouy8CBZVDYTwtaRdoYVJ42PD08sLBvD6:6mi+/dgy5Ef8doutaZZYCajVJ4KgvD

Score
7/10
discoverypersistenceprivilege_escalationupx

Malware Config

Targets

    • Target

      0d78ac5b9781c5c8e45e604adb6aad53_JaffaCakes118

    • Size

      89KB

    • MD5

      0d78ac5b9781c5c8e45e604adb6aad53

    • SHA1

      ce9e7a628019a5fb59787515968824c39559d58f

    • SHA256

      a866ece54a8608394d8019d4786ad943f3f42a0685c4dc7b085621bb8d8c1f98

    • SHA512

      3b712bf801b42427c5f3524259dcbbc7c9a2ed6bc87fa1af35347c8feda2df92a4cd2d8e4f60fb2eaa8b77d650e46fc0c0b115ddb07886d1b7ee7555a01cbb78

    • SSDEEP

      1536:6mi+xxdgF45E4h2Hnq8OFnouy8CBZVDYTwtaRdoYVJ42PD08sLBvD6:6mi+/dgy5Ef8doutaZZYCajVJ4KgvD

    Score
    7/10
    discoverypersistenceprivilege_escalationupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks