Overview

overview

10

Static

static

1

0593f3bdd6...18.lnk

windows7-x64

10

0593f3bdd6...18.lnk

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0593f3bdd6ff802fee36ba50925efee0_JaffaCakes118

  • Size

    1KB

  • Sample

    240428-tn61ysbe37

  • MD5

    0593f3bdd6ff802fee36ba50925efee0

  • SHA1

    dd02539875782f488a258d8f9906b24be0246a05

  • SHA256

    368337b4a3aeebb37c826679d98e93f03c9996c642c45633fe348020df8dc268

  • SHA512

    90ca1e3e17e82f1a969fd29edcd0172944b916361ba0674879370ca42ff053a46cae67df3b97f01f4344813108b855eec365f2f5d0bcda57714fa49dca5f49cd

Score
10/10

Malware Config

Extracted

Language
ps1
Deobfuscated
URLs
exe.dropper

http://jenny1558.codns.com:8080/Server.exe

Targets

    • Target

      0593f3bdd6ff802fee36ba50925efee0_JaffaCakes118

    • Size

      1KB

    • MD5

      0593f3bdd6ff802fee36ba50925efee0

    • SHA1

      dd02539875782f488a258d8f9906b24be0246a05

    • SHA256

      368337b4a3aeebb37c826679d98e93f03c9996c642c45633fe348020df8dc268

    • SHA512

      90ca1e3e17e82f1a969fd29edcd0172944b916361ba0674879370ca42ff053a46cae67df3b97f01f4344813108b855eec365f2f5d0bcda57714fa49dca5f49cd

    Score
    10/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks