Overview

overview

7

Static

static

5

304fc9cfd9...18.exe

windows7-x64

7

304fc9cfd9...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    304fc9cfd9ec40892dde1bd9b4b14ff9_JaffaCakes118

  • Size

    2.3MB

  • Sample

    241010-rnc2rsvgkr

  • MD5

    304fc9cfd9ec40892dde1bd9b4b14ff9

  • SHA1

    4f4f56e7094e9f902cd7e84bb3eed8a61deaf10f

  • SHA256

    61ed0c6cdedb33788e863ceddfebd9c0108966d99991bf805563b6887791a9be

  • SHA512

    6d0a722c30bc75e74101372e4bce83be87d680e7bd154d3a973fc380f20fee234927688583c85db28d4a88acfa1382679287978021ce8e1b4bde20d4ea5186f3

  • SSDEEP

    49152:qeV2kAH8thkEwqiYprcPB394oieUF1mJiQ4ZNC24cEfzEK5:qg2xIY68dviHTmJiQ4nB4cEbEK5

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      304fc9cfd9ec40892dde1bd9b4b14ff9_JaffaCakes118

    • Size

      2.3MB

    • MD5

      304fc9cfd9ec40892dde1bd9b4b14ff9

    • SHA1

      4f4f56e7094e9f902cd7e84bb3eed8a61deaf10f

    • SHA256

      61ed0c6cdedb33788e863ceddfebd9c0108966d99991bf805563b6887791a9be

    • SHA512

      6d0a722c30bc75e74101372e4bce83be87d680e7bd154d3a973fc380f20fee234927688583c85db28d4a88acfa1382679287978021ce8e1b4bde20d4ea5186f3

    • SSDEEP

      49152:qeV2kAH8thkEwqiYprcPB394oieUF1mJiQ4ZNC24cEfzEK5:qg2xIY68dviHTmJiQ4nB4cEbEK5

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks