General
-
Target
ed64cdcc9d32a00fa7f7a1d83e7937a5_JaffaCakes118
-
Size
5.5MB
-
Sample
240411-pcy4rabc43
-
MD5
ed64cdcc9d32a00fa7f7a1d83e7937a5
-
SHA1
bb5681b4bd170ee8a4e641666bc28a6406fb9189
-
SHA256
432e49e0b20100eb594bcfbff2e53573a0b5780bcf979b31e43c910bddc402ba
-
SHA512
10aa04b15baf16bdf6ef25637f9344c27596d48887097d2b4fc0dac929e6abdb22856eb112866a6ba80bd13b37e370082c2b2d3e0438691cd07d96a3d8b1004e
-
SSDEEP
98304:S2okJrBhPW9bd7+uW3k/0bkqrp3eyfKMdhEfpqUTx3Qe8gkP4fZtJfU:Pt8Wib1yfdhuEmThzU
Static task
static1
Behavioral task
behavioral1
Sample
Setup-gen-PCIMC6-8.516.00-ENG-6B_std.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
Setup-gen-PCIMC6-8.516.00-ENG-6B_std.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
Setup-gen-PCIMC6-8.516.00-ENG-6B_std.exe
-
Size
6.1MB
-
MD5
8df71e125728966818cf49a2dbea623d
-
SHA1
a097e94885c7f491830874f0e29e047ede475152
-
SHA256
363ee830e3732577fdff045108c27277c526e6b83286669a8c54f0021bac5899
-
SHA512
c623b857344b338e61cb599c37b700c1b2f4697399375c3c117a3ee15ef08b10a8fe51c93865c1c562fefff1542d4ed55eeddb4f3cd55d51f0d7d83247a80e4f
-
SSDEEP
98304:b8CBmcnY8zot0UHjesE7zmRWnED2wNjI+NjfB5VRM79Cf9CKR:b8CBBYYot3jvkzPEd/j5zO7G93
Score8/10-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-