Overview

overview

7

Static

static

5

266df45768...18.exe

windows7-x64

7

266df45768...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    266df457680dbb2703b81c68ae19769a_JaffaCakes118

  • Size

    135KB

  • Sample

    241008-2er5fatdpp

  • MD5

    266df457680dbb2703b81c68ae19769a

  • SHA1

    fc830bbe22a2cc47c4c9dd9519496d4fe9f6ca71

  • SHA256

    ca6c591318dbbd36b8c994df6e860ea608e6755c40a23c377fc5f2c6b0719656

  • SHA512

    fa3d0ab60d597b6c673fbde149df21498898e52ad9261504d9a7725627bb72f39f2f912cd6fc616238ab1aa191cf98f70f1fda1b5c8bde3bc2c0286de581d95f

  • SSDEEP

    3072:fYirQae1xlrVwqNAd8f7IpX+/GDCypO0Fy9:fXQaKxIqNAd8DIpX++uypO0FO

Score
7/10
discoverypersistenceupx

Malware Config

Targets

    • Target

      266df457680dbb2703b81c68ae19769a_JaffaCakes118

    • Size

      135KB

    • MD5

      266df457680dbb2703b81c68ae19769a

    • SHA1

      fc830bbe22a2cc47c4c9dd9519496d4fe9f6ca71

    • SHA256

      ca6c591318dbbd36b8c994df6e860ea608e6755c40a23c377fc5f2c6b0719656

    • SHA512

      fa3d0ab60d597b6c673fbde149df21498898e52ad9261504d9a7725627bb72f39f2f912cd6fc616238ab1aa191cf98f70f1fda1b5c8bde3bc2c0286de581d95f

    • SSDEEP

      3072:fYirQae1xlrVwqNAd8f7IpX+/GDCypO0Fy9:fXQaKxIqNAd8DIpX++uypO0FO

    Score
    7/10
    discoverypersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks