Overview

overview

8

Static

static

5

1ab18ab1b7...18.exe

windows7-x64

8

1ab18ab1b7...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    1ab18ab1b70d91a73d643983798a1af6_JaffaCakes118
  • Size 68KB
  • Sample241007-bnebts1bqa
  • SHA256 19c40ea4fc905abaa2b3bc7d2f0babf9c72cffbba4f3218a1393792a6ac6a3d1
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
defense_evasiondiscoveryexploitupx

Malware Config

Targets

    • Target
      1ab18ab1b70d91a73d643983798a1af6_JaffaCakes118
    • Size 68KB
    • SHA256 19c40ea4fc905abaa2b3bc7d2f0babf9c72cffbba4f3218a1393792a6ac6a3d1
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    defense_evasiondiscoveryexploitupx

    • Possible privilege escalation attempt

      exploit

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • File and Directory Permissions Modification: Windows File and Directory Permissions Modification

      defense_evasion

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks