Overview

overview

8

Static

static

3

f11498e94f...18.exe

windows7-x64

8

f11498e94f...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f11498e94f9b8646343f088f20a35a0e_JaffaCakes118

  • Size

    17KB

  • Sample

    240415-pxv8laef34

  • MD5

    f11498e94f9b8646343f088f20a35a0e

  • SHA1

    58e7bb1fe5b66fb9f3d1952916085e40e079b10d

  • SHA256

    37a680d0cf874624ed10aeb128c129439c673fcddaabc998f075591eef65438e

  • SHA512

    9b9cceb1c6013e46a2eb584df2864465ced012cb1a85695acd2309f6b359ad701833406c869ceafc7d3a64c62f2a793be9bfd746d3d26ab58edd049dfdcc573d

  • SSDEEP

    384:FFNFx7FgcmZO2Zp+Nye8pqrmub8TyztsDN:F7DFgoKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      f11498e94f9b8646343f088f20a35a0e_JaffaCakes118

    • Size

      17KB

    • MD5

      f11498e94f9b8646343f088f20a35a0e

    • SHA1

      58e7bb1fe5b66fb9f3d1952916085e40e079b10d

    • SHA256

      37a680d0cf874624ed10aeb128c129439c673fcddaabc998f075591eef65438e

    • SHA512

      9b9cceb1c6013e46a2eb584df2864465ced012cb1a85695acd2309f6b359ad701833406c869ceafc7d3a64c62f2a793be9bfd746d3d26ab58edd049dfdcc573d

    • SSDEEP

      384:FFNFx7FgcmZO2Zp+Nye8pqrmub8TyztsDN:F7DFgoKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks