Overview

overview

5

Static

static

1

0c6640148f...18.exe

windows7-x64

4

0c6640148f...18.exe

windows10-2004-x64

5

$_3_.exe

windows7-x64

3

$_3_.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c6640148fef4e4485f31c3c713e9361_JaffaCakes118

  • Size

    846KB

  • Sample

    240501-vzyz6aed28

  • MD5

    0c6640148fef4e4485f31c3c713e9361

  • SHA1

    3fa0532ed6e3d8fd03eb3b93a293ef7a77b6163f

  • SHA256

    b8800de7bb902faf5cc115ae5aa9a66dae51340e6cf8eeff2cb4f07e5f153256

  • SHA512

    76bd09eba20a457506e0c6fa95cacd1625bdfc9a7a4a9d6b988eed7cbae3ce25033d5320a388b92b3cd30b741778495627b2ce6eef1a32d667b477e1bf526d1f

  • SSDEEP

    24576:FtWEmllf2nhgPqqCO84G3bHkTwtcTBCQ2u2D:F+KxtEG3bHkM412u2D

Score
5/10

Malware Config

Targets

    • Target

      0c6640148fef4e4485f31c3c713e9361_JaffaCakes118

    • Size

      846KB

    • MD5

      0c6640148fef4e4485f31c3c713e9361

    • SHA1

      3fa0532ed6e3d8fd03eb3b93a293ef7a77b6163f

    • SHA256

      b8800de7bb902faf5cc115ae5aa9a66dae51340e6cf8eeff2cb4f07e5f153256

    • SHA512

      76bd09eba20a457506e0c6fa95cacd1625bdfc9a7a4a9d6b988eed7cbae3ce25033d5320a388b92b3cd30b741778495627b2ce6eef1a32d667b477e1bf526d1f

    • SSDEEP

      24576:FtWEmllf2nhgPqqCO84G3bHkTwtcTBCQ2u2D:F+KxtEG3bHkM412u2D

    Score
    5/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

    • Target

      $_3_

    • Size

      1.8MB

    • MD5

      b1d671736e8e4afd77b6a84f52a85165

    • SHA1

      3392417c0f9ed0a3b0c3bac4b66f22ed459b29dd

    • SHA256

      9cffb8f38ca1ff1c7a6244e17dee39d8d379ba5816ced18aeadd91b46aa4a37c

    • SHA512

      4ef78e54759f0a829daea4f79b75827dba6bf6a05666154112b535922a822152df40db2f2fca71fbfcf48ed8f3e730597a936bd8e40dc6192874c1608259b299

    • SSDEEP

      49152:5SNY8H0ZGF5j51XdQTPRPgoFx1NslvUOl/WkMWAA:GY00Z8F1XdUG

    Score
    5/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks