Overview

overview

8

Static

static

3

f291424ae0...18.dll

windows7-x64

8

f291424ae0...18.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f291424ae046e30364ffbd8997841390_JaffaCakes118

  • Size

    32KB

  • Sample

    240416-dvvy9sgb65

  • MD5

    f291424ae046e30364ffbd8997841390

  • SHA1

    fb7ca5cca1834a7bacec0a63171ff9dbec52d3c7

  • SHA256

    1a431f9265990e3c3187bb13f0e7b16c35b2abc72b581de4ba8dfebb90c2e6aa

  • SHA512

    4e196638849abc7e252b14a123adb9acc8baa6e2c2f398490f40ec421a374dcad1cbfc07c8346ca08fdd5c7ffba7afea23e1bd499c6416051d373603f566ea73

  • SSDEEP

    384:fUEk5GPafpRwt1paJs2VVmWKcF8/NXvPAzz55ZR51WwyK/8GuPP:fC1sBa/ccF8/NX3AnzZR51WpKUGuX

Score
8/10
persistence

Malware Config

Targets

    • Target

      f291424ae046e30364ffbd8997841390_JaffaCakes118

    • Size

      32KB

    • MD5

      f291424ae046e30364ffbd8997841390

    • SHA1

      fb7ca5cca1834a7bacec0a63171ff9dbec52d3c7

    • SHA256

      1a431f9265990e3c3187bb13f0e7b16c35b2abc72b581de4ba8dfebb90c2e6aa

    • SHA512

      4e196638849abc7e252b14a123adb9acc8baa6e2c2f398490f40ec421a374dcad1cbfc07c8346ca08fdd5c7ffba7afea23e1bd499c6416051d373603f566ea73

    • SSDEEP

      384:fUEk5GPafpRwt1paJs2VVmWKcF8/NXvPAzz55ZR51WwyK/8GuPP:fC1sBa/ccF8/NX3AnzZR51WpKUGuX

    Score
    8/10
    persistence

    • Modifies AppInit DLL entries

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks