Overview

overview

7

Static

static

3

63ef8e34b8...18.exe

windows7-x64

3

63ef8e34b8...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63ef8e34b8a7dc5f2518331944eec668_JaffaCakes118

  • Size

    191KB

  • Sample

    240521-tsvhqabe52

  • MD5

    63ef8e34b8a7dc5f2518331944eec668

  • SHA1

    18f9bb64b29dbfbe4d2075014bbbb42c5058a365

  • SHA256

    2688b54be51e4318cfbcbefe39d6bc5e242e6699e9918eeab30da50d3c069443

  • SHA512

    59fb32f5eef754de8a882d47f4ceb76805e0e2a0000ec9f05ab9c9729c843622f14a31d89dfabb65a73c4c30521388029cace8d851100fdb44c87998e391dc62

  • SSDEEP

    3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dV:HAVySV1eY4k437d+4wkTHdS2t

Score
7/10

Malware Config

Targets

    • Target

      63ef8e34b8a7dc5f2518331944eec668_JaffaCakes118

    • Size

      191KB

    • MD5

      63ef8e34b8a7dc5f2518331944eec668

    • SHA1

      18f9bb64b29dbfbe4d2075014bbbb42c5058a365

    • SHA256

      2688b54be51e4318cfbcbefe39d6bc5e242e6699e9918eeab30da50d3c069443

    • SHA512

      59fb32f5eef754de8a882d47f4ceb76805e0e2a0000ec9f05ab9c9729c843622f14a31d89dfabb65a73c4c30521388029cace8d851100fdb44c87998e391dc62

    • SSDEEP

      3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dV:HAVySV1eY4k437d+4wkTHdS2t

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks