Overview

overview

7

Static

static

3

f832f9f0af...18.exe

windows7-x64

7

f832f9f0af...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f832f9f0afe3d12157a846a12a0f3957_JaffaCakes118

  • Size

    37KB

  • Sample

    240418-rwtz9afg55

  • MD5

    f832f9f0afe3d12157a846a12a0f3957

  • SHA1

    e5bec442e880bbf8a7f4cb4ced9268b5b26898d2

  • SHA256

    0b7cd3c23befba454245837fe294516f69893d1b9e1d573cc8880a7e6ea433a3

  • SHA512

    c9aef4e722711fcfa95781b966a0c1bcd1de46ccfa220523dd2a021b04ef86f2ff941536a4dfd92d1b5c1c434ae86e792cf028c838f0fd6b9618b36dd3097b74

  • SSDEEP

    768:hTiyQ2xFxT+5qKjOFQ5Y5f9/Ers4R/Lv5ToxRCNCa/ZqmCo6ppB1xKUyHl8nyX:FiyzxFpUjd08lRLv5OrppRKUyxX

Score
7/10
persistence

Malware Config

Targets

    • Target

      f832f9f0afe3d12157a846a12a0f3957_JaffaCakes118

    • Size

      37KB

    • MD5

      f832f9f0afe3d12157a846a12a0f3957

    • SHA1

      e5bec442e880bbf8a7f4cb4ced9268b5b26898d2

    • SHA256

      0b7cd3c23befba454245837fe294516f69893d1b9e1d573cc8880a7e6ea433a3

    • SHA512

      c9aef4e722711fcfa95781b966a0c1bcd1de46ccfa220523dd2a021b04ef86f2ff941536a4dfd92d1b5c1c434ae86e792cf028c838f0fd6b9618b36dd3097b74

    • SSDEEP

      768:hTiyQ2xFxT+5qKjOFQ5Y5f9/Ers4R/Lv5ToxRCNCa/ZqmCo6ppB1xKUyHl8nyX:FiyzxFpUjd08lRLv5OrppRKUyxX

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks