Overview

overview

7

Static

static

5

381dab832a...18.exe

windows7-x64

7

381dab832a...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    381dab832afe77203b612f986d81a59c_JaffaCakes118

  • Size

    193KB

  • Sample

    241012-ded1tayfpg

  • MD5

    381dab832afe77203b612f986d81a59c

  • SHA1

    5786469ac3d7670cc4146c3ee5e255cfde36504a

  • SHA256

    bedcb8230ef2decb609b15b20ef8385a38ddc31c3417159bd5d65a0a16dd14e4

  • SHA512

    227b1ae36caa5b2acba389e8dd519c2d0f2f1b6111e78482797e5c0af3f96de0fa6557abc09dd3840240b070b13f9432089517245ce0f713b24d99c4d43e2d99

  • SSDEEP

    3072:fjAvo7lBultySqPBP0TR2c3rWIG2gUwr0aQ88IphDF5LtDQ7nE/W4GfogdorIPE:fjJD6IaTR2c3UN0b88IphDNDbe40CIM

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      381dab832afe77203b612f986d81a59c_JaffaCakes118

    • Size

      193KB

    • MD5

      381dab832afe77203b612f986d81a59c

    • SHA1

      5786469ac3d7670cc4146c3ee5e255cfde36504a

    • SHA256

      bedcb8230ef2decb609b15b20ef8385a38ddc31c3417159bd5d65a0a16dd14e4

    • SHA512

      227b1ae36caa5b2acba389e8dd519c2d0f2f1b6111e78482797e5c0af3f96de0fa6557abc09dd3840240b070b13f9432089517245ce0f713b24d99c4d43e2d99

    • SSDEEP

      3072:fjAvo7lBultySqPBP0TR2c3rWIG2gUwr0aQ88IphDF5LtDQ7nE/W4GfogdorIPE:fjJD6IaTR2c3UN0b88IphDNDbe40CIM

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks