Overview

overview

8

Static

static

5

2a07490df6...18.exe

windows7-x64

8

2a07490df6...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2a07490df6afe8cc79fdb8e6e084bc04_JaffaCakes118

  • Size

    50KB

  • Sample

    241009-d3cgws1bnq

  • MD5

    2a07490df6afe8cc79fdb8e6e084bc04

  • SHA1

    45acf1dc3ed80e5a89a7b41739a533bb0ecf8a53

  • SHA256

    28e8615dc8d1550d0840ec37fa2a3f743cf096bec26d3961fc024ba9e43ef810

  • SHA512

    7e5cab514ab38833ed8611e4e0d44348d96602ad98824095de6ec1f0b88a4a722245b6e5fffc92ee8e0afbada45d91e5f38bbfefe6212c824d27b265ef3214a8

  • SSDEEP

    768:ae2mxDMm+STZ5UW0Z080t0M0oJU0DU911+2H4:txft5y1Q

Score
8/10
discoveryupx

Malware Config

Targets

    • Target

      2a07490df6afe8cc79fdb8e6e084bc04_JaffaCakes118

    • Size

      50KB

    • MD5

      2a07490df6afe8cc79fdb8e6e084bc04

    • SHA1

      45acf1dc3ed80e5a89a7b41739a533bb0ecf8a53

    • SHA256

      28e8615dc8d1550d0840ec37fa2a3f743cf096bec26d3961fc024ba9e43ef810

    • SHA512

      7e5cab514ab38833ed8611e4e0d44348d96602ad98824095de6ec1f0b88a4a722245b6e5fffc92ee8e0afbada45d91e5f38bbfefe6212c824d27b265ef3214a8

    • SSDEEP

      768:ae2mxDMm+STZ5UW0Z080t0M0oJU0DU911+2H4:txft5y1Q

    Score
    8/10
    discoveryupx

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks