Overview

overview

7

Static

static

3

1a5248f486...18.exe

windows7-x64

6

1a5248f486...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a5248f486e4d1a5db48152179320355_JaffaCakes118

  • Size

    187KB

  • Sample

    240329-gnw5jabb6x

  • MD5

    1a5248f486e4d1a5db48152179320355

  • SHA1

    fbd920e79ea5f22524c602068c61fabe88b8d219

  • SHA256

    c234ed901efba946218505ab19e91b1844b511a5499c51f34c892664f54500e0

  • SHA512

    d668ac1d3e3daf7bf3b779c7979ec66b7681593114a3953e12a112b1befd20a912c991258e77f1c77f827b7c1688f2d6319db6b9d2b0f575cc4a1ccf46b3c9ec

  • SSDEEP

    3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8VtkaZgxkJ:o68i3odBiTl2+TCU/GtkqJ

Score
7/10
persistence

Malware Config

Targets

    • Target

      1a5248f486e4d1a5db48152179320355_JaffaCakes118

    • Size

      187KB

    • MD5

      1a5248f486e4d1a5db48152179320355

    • SHA1

      fbd920e79ea5f22524c602068c61fabe88b8d219

    • SHA256

      c234ed901efba946218505ab19e91b1844b511a5499c51f34c892664f54500e0

    • SHA512

      d668ac1d3e3daf7bf3b779c7979ec66b7681593114a3953e12a112b1befd20a912c991258e77f1c77f827b7c1688f2d6319db6b9d2b0f575cc4a1ccf46b3c9ec

    • SSDEEP

      3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/B8VtkaZgxkJ:o68i3odBiTl2+TCU/GtkqJ

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks