Overview

overview

7

Static

static

5

jaffacakes...ic.exe

windows10-2004-x64

7

jaffacakes...ic.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

DeskScan.exe

windows10-2004-x64

3

DeskScan.exe

windows11-ltsc_2024-x64

3

Uninst.exe

windows10-2004-x64

7

Uninst.exe

windows11-ltsc_2024-x64

7

info.pdf

windows10-2004-x64

3

info.pdf

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    jaffacakes118_UDS.DangerousObject.Multi.Generic.e97abb6897c397866392a6162ef446c3
  • Size 338KB
  • Sample261015-17qxeaee65
  • SHA256 c79e3ec3e497a744370c986a92843b696ed0e8256e4892b5e32f14e4c71490b4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
adwaredefense_evasiondiscoverylinkpdfspywareupx

Malware Config

Targets

    • Target
      jaffacakes118_UDS.DangerousObject.Multi.Generic.e97abb6897c397866392a6162ef446c3
    • Size 338KB
    • SHA256 c79e3ec3e497a744370c986a92843b696ed0e8256e4892b5e32f14e4c71490b4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 12KB
    • SHA256 a505e6c537a5ce0166227dda9f7671605395592ac9f1a3764e8a01b713939db1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      DeskScan.exe
    • Size 287KB
    • SHA256 2c84837c38b25da1df53d8570fb6a5572d6fae1b862a693ab6995b15b0361894
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      Uninst.exe
    • Size 35KB
    • SHA256 5d7bc9c4f834e60960d17468d24728e4455f301f628e3297507e4f8c50b269cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoveryupx

    • Deletes itself

      defense_evasion

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral7behavioral8
    • Target
      info.pdf
    • Size 5KB
    • SHA256 5e08072c5adc0dae086cd72520267cbdffd28053e31382db93a60de31a0208be
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks