Overview

overview

8

Static

static

3

fb02122a31...18.exe

windows7-x64

8

fb02122a31...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb02122a318c0f795502a9699ec0daaa_JaffaCakes118

  • Size

    17KB

  • Sample

    240419-x6pfeaeb3s

  • MD5

    fb02122a318c0f795502a9699ec0daaa

  • SHA1

    866553d0778b7859ca17e20fc44150ce7169d224

  • SHA256

    35417aecf49f6f53306e3a1a18f315acd5c0c94c5610c81ff763ba96a3ca457a

  • SHA512

    5a49e13560e2a0a6a8fd494d8b5aa7dd039cf6f52d0b0fba42c48c22782150a54c4a7b93035d0fe2209e05f47285fe2694f200ce36307ac1ca4fe51fce596f15

  • SSDEEP

    384:IF0Et2SfcmZO2Zp+Nye8pqrmub8TyztsDN:IKLSfoKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      fb02122a318c0f795502a9699ec0daaa_JaffaCakes118

    • Size

      17KB

    • MD5

      fb02122a318c0f795502a9699ec0daaa

    • SHA1

      866553d0778b7859ca17e20fc44150ce7169d224

    • SHA256

      35417aecf49f6f53306e3a1a18f315acd5c0c94c5610c81ff763ba96a3ca457a

    • SHA512

      5a49e13560e2a0a6a8fd494d8b5aa7dd039cf6f52d0b0fba42c48c22782150a54c4a7b93035d0fe2209e05f47285fe2694f200ce36307ac1ca4fe51fce596f15

    • SSDEEP

      384:IF0Et2SfcmZO2Zp+Nye8pqrmub8TyztsDN:IKLSfoKK8o8TyJc

    Score
    8/10
    persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks