Overview

overview

7

Static

static

1

ff220eee8f...18.exe

windows7-x64

7

ff220eee8f...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ff220eee8f6f9621e6b627f50cf7c61d_JaffaCakes118

  • Size

    57KB

  • Sample

    240421-m49cpahg4z

  • MD5

    ff220eee8f6f9621e6b627f50cf7c61d

  • SHA1

    3ccf911450cf2fa247115db289bdc098c4300e7c

  • SHA256

    c86fe1c6fc6bbf7a41d47a81305d4c06098239b2de603722930a47d649530129

  • SHA512

    74cbfc91df159182c9b09aed79a847019f168f5c03a9b5bfe3f6fcb4d32560149ee4d651ad67584637167380490fe5461f7bd439e086897d25e613746df998f6

  • SSDEEP

    768:PHmHKO7H4kzqaiVEqFiJBZLLuoP247U8sdXzxn81XgX/GPiLu/T7GTmqKyVzbnJ4:eHJ48DUE7JrfuA77iX4XgX/GANXnu

Score
7/10
persistence

Malware Config

Targets

    • Target

      ff220eee8f6f9621e6b627f50cf7c61d_JaffaCakes118

    • Size

      57KB

    • MD5

      ff220eee8f6f9621e6b627f50cf7c61d

    • SHA1

      3ccf911450cf2fa247115db289bdc098c4300e7c

    • SHA256

      c86fe1c6fc6bbf7a41d47a81305d4c06098239b2de603722930a47d649530129

    • SHA512

      74cbfc91df159182c9b09aed79a847019f168f5c03a9b5bfe3f6fcb4d32560149ee4d651ad67584637167380490fe5461f7bd439e086897d25e613746df998f6

    • SSDEEP

      768:PHmHKO7H4kzqaiVEqFiJBZLLuoP247U8sdXzxn81XgX/GPiLu/T7GTmqKyVzbnJ4:eHJ48DUE7JrfuA77iX4XgX/GANXnu

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks