Overview

overview

8

Static

static

3

ebbd6fd97b...18.dll

windows7-x64

8

ebbd6fd97b...18.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebbd6fd97bc0685a385126c92c6917fd_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240410-xbtrmsgc35

  • MD5

    ebbd6fd97bc0685a385126c92c6917fd

  • SHA1

    a9259be57b32b5178c8f2d48569c1778462a9743

  • SHA256

    da77c3e9f2a3e8ae8bce8df16229b63faa26fe8c53dff1d79b1313829f4fa887

  • SHA512

    aa743409730aeb4035e86691bffaf92e226ea2cc09ea2dd8d3007bb754ee1c429d890405e74644ac7e313200d14e024d0a2bf5ef75ef01d400255b89c68b6709

  • SSDEEP

    24576:GtE5co3MnQXOCQevEQBX1tYrPTnhwWpMCBd4uOMG:GLjQXOg1Kvn7/G

Score
8/10

Malware Config

Targets

    • Target

      ebbd6fd97bc0685a385126c92c6917fd_JaffaCakes118

    • Size

      1.3MB

    • MD5

      ebbd6fd97bc0685a385126c92c6917fd

    • SHA1

      a9259be57b32b5178c8f2d48569c1778462a9743

    • SHA256

      da77c3e9f2a3e8ae8bce8df16229b63faa26fe8c53dff1d79b1313829f4fa887

    • SHA512

      aa743409730aeb4035e86691bffaf92e226ea2cc09ea2dd8d3007bb754ee1c429d890405e74644ac7e313200d14e024d0a2bf5ef75ef01d400255b89c68b6709

    • SSDEEP

      24576:GtE5co3MnQXOCQevEQBX1tYrPTnhwWpMCBd4uOMG:GLjQXOg1Kvn7/G

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks