Overview

overview

7

Static

static

3

f230cfecab...18.exe

windows7-x64

7

f230cfecab...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f230cfecab281c9040bb9f5443a4fc79_JaffaCakes118

  • Size

    15.9MB

  • Sample

    240415-3p743sbe39

  • MD5

    f230cfecab281c9040bb9f5443a4fc79

  • SHA1

    c0c67a19a987da7d8c21c5dd4b98145e763afd5e

  • SHA256

    038848c7258f264b13b63e1f38aa3e030280e164a0f334310ec93911b42d6043

  • SHA512

    c3b90e57e954f904efb7b7bf98622445ce118e1a639dbd29fba1fb36367429e1f8c7e0fc2ef7b148812ce3674a2499341ae0b2471e344dd3d1232fc9103301a0

  • SSDEEP

    393216:ig7usg7usg7usg7usg7usg7usg7usg7uN:fSRSRSRSRSRSRSRSN

Score
7/10
persistence

Malware Config

Targets

    • Target

      f230cfecab281c9040bb9f5443a4fc79_JaffaCakes118

    • Size

      15.9MB

    • MD5

      f230cfecab281c9040bb9f5443a4fc79

    • SHA1

      c0c67a19a987da7d8c21c5dd4b98145e763afd5e

    • SHA256

      038848c7258f264b13b63e1f38aa3e030280e164a0f334310ec93911b42d6043

    • SHA512

      c3b90e57e954f904efb7b7bf98622445ce118e1a639dbd29fba1fb36367429e1f8c7e0fc2ef7b148812ce3674a2499341ae0b2471e344dd3d1232fc9103301a0

    • SSDEEP

      393216:ig7usg7usg7usg7usg7usg7usg7usg7uN:fSRSRSRSRSRSRSRSN

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks