Overview

overview

7

Static

static

3

0bbe33b7ef...18.exe

windows7-x64

7

0bbe33b7ef...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0bbe33b7ef5b17c311c8d8bd90ae8324_JaffaCakes118

  • Size

    260KB

  • Sample

    240501-n6pxhaec9t

  • MD5

    0bbe33b7ef5b17c311c8d8bd90ae8324

  • SHA1

    e22613870a983979196a28440810c2fcf321b3d1

  • SHA256

    2b535856967f9fd72a88921d737f3419255b6fdf29b54da8f2ad5ee638884bfd

  • SHA512

    e0e380b15861da5969e380049270ae00f3324cceaa94d130e9d241dc004bc2d6e0b67392cf972a45e011bb565b07f5993cfd8a1d724f569e80e983654530be3f

  • SSDEEP

    6144:85ZzVYQck9ANv494D83pdc6yAaOvgEMHHEMH:85Z5YQck9ANv494D83pN5MEM

Score
7/10
persistence

Malware Config

Targets

    • Target

      0bbe33b7ef5b17c311c8d8bd90ae8324_JaffaCakes118

    • Size

      260KB

    • MD5

      0bbe33b7ef5b17c311c8d8bd90ae8324

    • SHA1

      e22613870a983979196a28440810c2fcf321b3d1

    • SHA256

      2b535856967f9fd72a88921d737f3419255b6fdf29b54da8f2ad5ee638884bfd

    • SHA512

      e0e380b15861da5969e380049270ae00f3324cceaa94d130e9d241dc004bc2d6e0b67392cf972a45e011bb565b07f5993cfd8a1d724f569e80e983654530be3f

    • SSDEEP

      6144:85ZzVYQck9ANv494D83pdc6yAaOvgEMHHEMH:85Z5YQck9ANv494D83pN5MEM

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks