Overview

overview

7

Static

static

3

f28f62cbf3...18.exe

windows7-x64

7

f28f62cbf3...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f28f62cbf3eaf423f16c60913ae33a8b_JaffaCakes118

  • Size

    7.9MB

  • Sample

    240416-dsv69ahh9w

  • MD5

    f28f62cbf3eaf423f16c60913ae33a8b

  • SHA1

    ee2f54b55d31b4e84792426b3bc98baf4f6a9c3c

  • SHA256

    164280933a3fa8d8380edc2427f5c99faf175b976b02908fa8fcdcd2083afaf6

  • SHA512

    7d5d1597214292e5718e5036ccbf113f93b691cf89ac509f2ad13fee6ea32f4ecc36f419fa9669be066962099ed4cdf2cfae6a64f3bda8f95d724662f32b9c24

  • SSDEEP

    196608:0Gazg7DS8Gazg7DS8Gazg7DS8Gazg7DSv:Ig7uwg7uwg7uwg7uv

Score
7/10
persistence

Malware Config

Targets

    • Target

      f28f62cbf3eaf423f16c60913ae33a8b_JaffaCakes118

    • Size

      7.9MB

    • MD5

      f28f62cbf3eaf423f16c60913ae33a8b

    • SHA1

      ee2f54b55d31b4e84792426b3bc98baf4f6a9c3c

    • SHA256

      164280933a3fa8d8380edc2427f5c99faf175b976b02908fa8fcdcd2083afaf6

    • SHA512

      7d5d1597214292e5718e5036ccbf113f93b691cf89ac509f2ad13fee6ea32f4ecc36f419fa9669be066962099ed4cdf2cfae6a64f3bda8f95d724662f32b9c24

    • SSDEEP

      196608:0Gazg7DS8Gazg7DS8Gazg7DS8Gazg7DSv:Ig7uwg7uwg7uwg7uv

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks