Overview

overview

7

Static

static

1

edadc5bad5...18.lnk

windows7-x64

7

edadc5bad5...18.lnk

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    edadc5bad5c854dfe6b0a63b55309a28_JaffaCakes118

  • Size

    1KB

  • Sample

    240411-r7ygtadf97

  • MD5

    edadc5bad5c854dfe6b0a63b55309a28

  • SHA1

    dc1f193168a8022ada8b9c5771a19586f94bab97

  • SHA256

    bc66b12c8b9dce2d58fe3e899b97f51ac009f26c21ea1b88fcf117214b1f13f2

  • SHA512

    8b00b8566fb4960c9719dbdf8df3a0126f50db52e8ab092b2c53a4fd4bad91922725ac20c4777a376e1a7de7246abacb7c5d84451dabf731d697e3e939481ad9

Score
7/10

Malware Config

Targets

    • Target

      edadc5bad5c854dfe6b0a63b55309a28_JaffaCakes118

    • Size

      1KB

    • MD5

      edadc5bad5c854dfe6b0a63b55309a28

    • SHA1

      dc1f193168a8022ada8b9c5771a19586f94bab97

    • SHA256

      bc66b12c8b9dce2d58fe3e899b97f51ac009f26c21ea1b88fcf117214b1f13f2

    • SHA512

      8b00b8566fb4960c9719dbdf8df3a0126f50db52e8ab092b2c53a4fd4bad91922725ac20c4777a376e1a7de7246abacb7c5d84451dabf731d697e3e939481ad9

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Use of msiexec (install) with remote resource

    • Blocklisted process makes network request

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks