Overview

overview

5

Static

static

1

2ed5ceb201...18.exe

windows7-x64

4

2ed5ceb201...18.exe

windows10-2004-x64

5

$_3_.exe

windows7-x64

3

$_3_.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    2ed5ceb20106345e1df472f7dc3e1ec2_JaffaCakes118

  • Size

    967KB

  • Sample

    240510-nc372aee72

  • MD5

    2ed5ceb20106345e1df472f7dc3e1ec2

  • SHA1

    038c9cca3cfec51b533c73bc76d4a5d42fdceaef

  • SHA256

    05138d005f99ed2023f6eb625d3c552d35d0063e42a6ccb85172c3cd5e139176

  • SHA512

    0648e9ba2a1c974457e7280439b0e1eeceeff6e3cbc5ae661a16fcfd7d6f5617eb9805d4861172caafd55cf992d46eec882de26c43833435b4c2c7cf91011457

  • SSDEEP

    24576:xtXCT35bEN60Yc/rMegvH6RK1aeGokgwH+:xKBtV6MjvH6RIrDC+

Score
5/10

Malware Config

Targets

    • Target

      2ed5ceb20106345e1df472f7dc3e1ec2_JaffaCakes118

    • Size

      967KB

    • MD5

      2ed5ceb20106345e1df472f7dc3e1ec2

    • SHA1

      038c9cca3cfec51b533c73bc76d4a5d42fdceaef

    • SHA256

      05138d005f99ed2023f6eb625d3c552d35d0063e42a6ccb85172c3cd5e139176

    • SHA512

      0648e9ba2a1c974457e7280439b0e1eeceeff6e3cbc5ae661a16fcfd7d6f5617eb9805d4861172caafd55cf992d46eec882de26c43833435b4c2c7cf91011457

    • SSDEEP

      24576:xtXCT35bEN60Yc/rMegvH6RK1aeGokgwH+:xKBtV6MjvH6RIrDC+

    Score
    5/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

    • Target

      $_3_

    • Size

      1.8MB

    • MD5

      77bfacca17ee1d89833b57f3a746d9a0

    • SHA1

      aa9490c913489c5eafd02f67f875efcb56d23036

    • SHA256

      38571b0965110d07c6fbf4813ab628d4017cf52c681c457fb3f184b644fb0b52

    • SHA512

      21ecc2fce94a58cd39127964730b01722b9dafa20d3af65b023fe83188c08211ba1324849513ffc10b6a359737f98c4d06770dc1954f8880daff938a06581e6f

    • SSDEEP

      49152:/SNY8H0ZGF5j51XdQTPRPgojx1NslvUOl/WkMWAH:oY00Z8F1XdUL

    Score
    5/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks