General
-
Target
7db9fe7b332f94b2c50ce2761b40abfc_JaffaCakes118
-
Size
12KB
-
Sample
240401-3vkkzaba29
-
MD5
7db9fe7b332f94b2c50ce2761b40abfc
-
SHA1
277de0d07f6080d096fe3b2ece7c99ee3167f3ed
-
SHA256
9af04e365ed1f2e0ea04dc71729f0e3341f0f981405c9f3ddd6d6d7b693fb733
-
SHA512
b735fc8a216ba8833ebaa00d7f67969645f78a572d5c92052de36e5433d0842ed73e481aec3a58484d7a3ee36033fe83cfaa9565b70472b6b9247a4d7d640c1b
-
SSDEEP
192:wAvHERJyEyHc+IKX/uuw95RcHdgKMsDjr813OXoJ6GYfBsLP4N32QDvsUgcc:w84Jumh/R7R13OXoJUGsxwb
Static task
static1
Behavioral task
behavioral1
Sample
7db9fe7b332f94b2c50ce2761b40abfc_JaffaCakes118.js
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7db9fe7b332f94b2c50ce2761b40abfc_JaffaCakes118.js
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
7db9fe7b332f94b2c50ce2761b40abfc_JaffaCakes118
-
Size
12KB
-
MD5
7db9fe7b332f94b2c50ce2761b40abfc
-
SHA1
277de0d07f6080d096fe3b2ece7c99ee3167f3ed
-
SHA256
9af04e365ed1f2e0ea04dc71729f0e3341f0f981405c9f3ddd6d6d7b693fb733
-
SHA512
b735fc8a216ba8833ebaa00d7f67969645f78a572d5c92052de36e5433d0842ed73e481aec3a58484d7a3ee36033fe83cfaa9565b70472b6b9247a4d7d640c1b
-
SSDEEP
192:wAvHERJyEyHc+IKX/uuw95RcHdgKMsDjr813OXoJ6GYfBsLP4N32QDvsUgcc:w84Jumh/R7R13OXoJUGsxwb
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Adds Run key to start application
-