Overview

overview

7

Static

static

3

fbfcfdebc7...18.exe

windows7-x64

7

fbfcfdebc7...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fbfcfdebc74ba26d34db29a8bc7bc273_JaffaCakes118

  • Size

    208KB

  • Sample

    240420-fqa5eaaa4t

  • MD5

    fbfcfdebc74ba26d34db29a8bc7bc273

  • SHA1

    8f20d87622d63e6f90d3e3895fa4f1455ad91835

  • SHA256

    e9d7b1c477d1150b72a72e69edbee57d667675a001789b0009d60362e6c3ddf7

  • SHA512

    b4e214812dc6eb889dcf3942add93386250a155e057101eda248b722d92b51446a2731a9ec03abc96b89751e81d9ca1ab2c4a27e1d75983fe872df4d38aa2658

  • SSDEEP

    6144:i9saWC+qm6O/r6tl/l05QbcN7MIiZsdXw/WK816kEjP:gimNbcUDo16kU

Score
7/10

Malware Config

Targets

    • Target

      fbfcfdebc74ba26d34db29a8bc7bc273_JaffaCakes118

    • Size

      208KB

    • MD5

      fbfcfdebc74ba26d34db29a8bc7bc273

    • SHA1

      8f20d87622d63e6f90d3e3895fa4f1455ad91835

    • SHA256

      e9d7b1c477d1150b72a72e69edbee57d667675a001789b0009d60362e6c3ddf7

    • SHA512

      b4e214812dc6eb889dcf3942add93386250a155e057101eda248b722d92b51446a2731a9ec03abc96b89751e81d9ca1ab2c4a27e1d75983fe872df4d38aa2658

    • SSDEEP

      6144:i9saWC+qm6O/r6tl/l05QbcN7MIiZsdXw/WK816kEjP:gimNbcUDo16kU

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks