Overview

overview

7

Static

static

3

20ef3fb27b...18.exe

windows7-x64

6

20ef3fb27b...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    20ef3fb27b45fa819c577cd58a25f5f6_JaffaCakes118

  • Size

    160KB

  • Sample

    240329-nmvnmsfg3w

  • MD5

    20ef3fb27b45fa819c577cd58a25f5f6

  • SHA1

    079d1ea0e7de1d20ed86c80b6f87f2b4fee65f3f

  • SHA256

    00eb301b35855d4b90cfdd3a62820ca9b7468f65d1317ae60a7e0bb52b82368e

  • SHA512

    6b960ccb925c1712458b50a05bc4553db1203f82c46dcb59ab76352c5a30e8fb6f9180dfd23ca6353d521db1e147bf849964c60b986990ad8c12430f6e6975fb

  • SSDEEP

    3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/k8f:o68i3odBiTl2+TCU//

Score
7/10
persistence

Malware Config

Targets

    • Target

      20ef3fb27b45fa819c577cd58a25f5f6_JaffaCakes118

    • Size

      160KB

    • MD5

      20ef3fb27b45fa819c577cd58a25f5f6

    • SHA1

      079d1ea0e7de1d20ed86c80b6f87f2b4fee65f3f

    • SHA256

      00eb301b35855d4b90cfdd3a62820ca9b7468f65d1317ae60a7e0bb52b82368e

    • SHA512

      6b960ccb925c1712458b50a05bc4553db1203f82c46dcb59ab76352c5a30e8fb6f9180dfd23ca6353d521db1e147bf849964c60b986990ad8c12430f6e6975fb

    • SSDEEP

      3072:/cT9g8immW6Pozkk2eKs/CSr2nQ/E2S5ny+bF2u1I+ddDK7Hlq/k8f:o68i3odBiTl2+TCU//

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks