Overview

overview

10

Static

static

3

601e9a4973...18.exe

windows7-x64

10

601e9a4973...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    601e9a4973b6774a926bd6b668678683_JaffaCakes118

  • Size

    40KB

  • Sample

    241020-dyt65swelf

  • MD5

    601e9a4973b6774a926bd6b668678683

  • SHA1

    32c9b8d50bb267b35be2850d2dc0c0f4bc23d6eb

  • SHA256

    f096a2d518c2225cde0d9801b87ef868c79dc2ec1523f486f40e0e16e3594ba1

  • SHA512

    1fc53f61a64d3e3dfec5d4308de419f50e87201e7c67014b48a950802cf802f7e82ef8c59088fd5b06b15fd64abf0564c5229b411871f8c82412d3ce1411bab8

  • SSDEEP

    768:kf1Y9RRw/dUT6vurGd/pkUOyGAv+rCBsPGTWikRyyyxhylQ:GY9jw/dUT62rGdiUOWWrC6P6T3

Score
10/10
upatrediscoverydownloader

Malware Config

Targets

    • Target

      601e9a4973b6774a926bd6b668678683_JaffaCakes118

    • Size

      40KB

    • MD5

      601e9a4973b6774a926bd6b668678683

    • SHA1

      32c9b8d50bb267b35be2850d2dc0c0f4bc23d6eb

    • SHA256

      f096a2d518c2225cde0d9801b87ef868c79dc2ec1523f486f40e0e16e3594ba1

    • SHA512

      1fc53f61a64d3e3dfec5d4308de419f50e87201e7c67014b48a950802cf802f7e82ef8c59088fd5b06b15fd64abf0564c5229b411871f8c82412d3ce1411bab8

    • SSDEEP

      768:kf1Y9RRw/dUT6vurGd/pkUOyGAv+rCBsPGTWikRyyyxhylQ:GY9jw/dUT62rGdiUOWWrC6P6T3

    Score
    10/10
    upatrediscoverydownloader

    • Upatre

      Upatre is a generic malware downloader.

      downloaderupatre

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks