Overview

overview

7

Static

static

1

56bc70398d...18.exe

windows7-x64

7

56bc70398d...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    56bc70398d024c900c392fadf363d762_JaffaCakes118

  • Size

    1.1MB

  • Sample

    241018-lp64cazdme

  • MD5

    56bc70398d024c900c392fadf363d762

  • SHA1

    98062d05b0bc37ce1f3d09ea0b760a740dea924c

  • SHA256

    e9a1adb1e5af4926a9073e2d7f98b52fcf2519fd4f85594d81317877ccf5e994

  • SHA512

    f90e79b0ae8dba8574e643617c5684dc98a37985be853f073c0e6ac210a478fe0fabd0ac06e5f6f7c799f8dea4844624cb53bf7e0379856a223bc2a4d9173aa1

  • SSDEEP

    24576:p9WC988bu6CostkKL0u1wk/h48OcIEI248Uc/V:pB88TCoaL1qSV/V

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      56bc70398d024c900c392fadf363d762_JaffaCakes118

    • Size

      1.1MB

    • MD5

      56bc70398d024c900c392fadf363d762

    • SHA1

      98062d05b0bc37ce1f3d09ea0b760a740dea924c

    • SHA256

      e9a1adb1e5af4926a9073e2d7f98b52fcf2519fd4f85594d81317877ccf5e994

    • SHA512

      f90e79b0ae8dba8574e643617c5684dc98a37985be853f073c0e6ac210a478fe0fabd0ac06e5f6f7c799f8dea4844624cb53bf7e0379856a223bc2a4d9173aa1

    • SSDEEP

      24576:p9WC988bu6CostkKL0u1wk/h48OcIEI248Uc/V:pB88TCoaL1qSV/V

    Score
    7/10
    discoveryupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks