Overview

overview

7

Static

static

3

2b5dc3847c...18.exe

windows7-x64

7

2b5dc3847c...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b5dc3847c46d0fcb0926692ebc0b384_JaffaCakes118

  • Size

    636KB

  • Sample

    240509-xdsx5acb88

  • MD5

    2b5dc3847c46d0fcb0926692ebc0b384

  • SHA1

    eb2845377cec3de83eb98ea4c2d2bb1f999a034a

  • SHA256

    ad89ce6fc686c6270a53af73d0b2e31b26dfc06cac41989850fb0da1a04a21a2

  • SHA512

    10c24c08ebfb74094b5b4e002a990c2ff7011c613042c1ea35838c11618bbd30372aa21d32659a8d44bf3639d50474b1058b5deb43545f95a6f63ccbed51e4ce

  • SSDEEP

    12288:waCfbqHNucxW0QuFg64Sr9T4UgQgO9lvBrg7rRw:wlf+twfn64Sr9T4UUO9J9Ei

Score
7/10
persistence

Malware Config

Targets

    • Target

      2b5dc3847c46d0fcb0926692ebc0b384_JaffaCakes118

    • Size

      636KB

    • MD5

      2b5dc3847c46d0fcb0926692ebc0b384

    • SHA1

      eb2845377cec3de83eb98ea4c2d2bb1f999a034a

    • SHA256

      ad89ce6fc686c6270a53af73d0b2e31b26dfc06cac41989850fb0da1a04a21a2

    • SHA512

      10c24c08ebfb74094b5b4e002a990c2ff7011c613042c1ea35838c11618bbd30372aa21d32659a8d44bf3639d50474b1058b5deb43545f95a6f63ccbed51e4ce

    • SSDEEP

      12288:waCfbqHNucxW0QuFg64Sr9T4UgQgO9lvBrg7rRw:wlf+twfn64Sr9T4UUO9J9Ei

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks