Overview

overview

7

Static

static

3

022e4768ba...18.exe

windows7-x64

7

022e4768ba...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    022e4768ba89476aa337f533e80fa0f0_JaffaCakes118

  • Size

    262KB

  • Sample

    240427-cmx8zsgh79

  • MD5

    022e4768ba89476aa337f533e80fa0f0

  • SHA1

    259682aee68710e452c0136920991dd71bc54b80

  • SHA256

    e7ccb818b4b93a355302324a6abfedc99d38aa6db3464a3fbcce0b7903b06032

  • SHA512

    fa2f6568350a114f35c0a5d2b00dd6bec93f6d4cc08e48a32b5b9e27fa58e9a3ef27c3c26b422b341a2affc891ec412791ac9b4516dac8adaaa6245ea2b86f07

  • SSDEEP

    6144:MdZU6ZyznmkfANv494D83X5DAzMUVOv0KEEMHHEMH:Ka6Z+nmkfANv494D83X28nMEM

Score
7/10
persistence

Malware Config

Targets

    • Target

      022e4768ba89476aa337f533e80fa0f0_JaffaCakes118

    • Size

      262KB

    • MD5

      022e4768ba89476aa337f533e80fa0f0

    • SHA1

      259682aee68710e452c0136920991dd71bc54b80

    • SHA256

      e7ccb818b4b93a355302324a6abfedc99d38aa6db3464a3fbcce0b7903b06032

    • SHA512

      fa2f6568350a114f35c0a5d2b00dd6bec93f6d4cc08e48a32b5b9e27fa58e9a3ef27c3c26b422b341a2affc891ec412791ac9b4516dac8adaaa6245ea2b86f07

    • SSDEEP

      6144:MdZU6ZyznmkfANv494D83X5DAzMUVOv0KEEMHHEMH:Ka6Z+nmkfANv494D83X28nMEM

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks