Overview

overview

10

Static

static

5

0f93e5aa5e...18.exe

windows7-x64

10

0f93e5aa5e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f93e5aa5ef18125931b625d57491fca_JaffaCakes118

  • Size

    114KB

  • Sample

    241003-tsglvsvbmk

  • MD5

    0f93e5aa5ef18125931b625d57491fca

  • SHA1

    a69e222aa626f59d6c1d7bf69150a75f5fde98d4

  • SHA256

    54931dfa1980f1e953b6af72ca005388c623efdc49186541d0da0cd0da3391e0

  • SHA512

    64865a35b2f410d5ba1706625fa5d0b254976d74d99648d82d43fa0a00f39d7987c24f4e86a730f469d6de0516408d2b6a992704373a2d12f0ec9d07de0d9447

  • SSDEEP

    3072:3GcclV+8kLfDyLp6FRdL8xohTAnS+nd1jbMKR/LLPEI:YLp6+oMDyKRTA

Score
10/10
defense_evasiondiscoverypersistenceupx

Malware Config

Targets

    • Target

      0f93e5aa5ef18125931b625d57491fca_JaffaCakes118

    • Size

      114KB

    • MD5

      0f93e5aa5ef18125931b625d57491fca

    • SHA1

      a69e222aa626f59d6c1d7bf69150a75f5fde98d4

    • SHA256

      54931dfa1980f1e953b6af72ca005388c623efdc49186541d0da0cd0da3391e0

    • SHA512

      64865a35b2f410d5ba1706625fa5d0b254976d74d99648d82d43fa0a00f39d7987c24f4e86a730f469d6de0516408d2b6a992704373a2d12f0ec9d07de0d9447

    • SSDEEP

      3072:3GcclV+8kLfDyLp6FRdL8xohTAnS+nd1jbMKR/LLPEI:YLp6+oMDyKRTA

    Score
    10/10
    defense_evasiondiscoverypersistenceupx

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Hide Artifacts: Hidden Files and Directories

      defense_evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks