Overview

overview

7

Static

static

3

65c4936e60...18.exe

windows7-x64

7

65c4936e60...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65c4936e6079a059a2c0549cdecbe27d_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240522-dejajaac3t

  • MD5

    65c4936e6079a059a2c0549cdecbe27d

  • SHA1

    d50494f6fee5d5213424b6f78b3019c698d95add

  • SHA256

    397d284b4edcd3d78c129acc7198c864b03bda822a4e5894bf8f69ee91fca38f

  • SHA512

    2dacf21d9d89950a851e595d8d56177b8cd45d9cc8584f453c0132a7d42e83b9325f85bb1d8c25acfc9627be67221eca044216491059f349ac350545cc8b7592

  • SSDEEP

    12288:vsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQK:UV4W8hqBYgnBLfVqx1Wjk3

Score
7/10
discovery

Malware Config

Targets

    • Target

      65c4936e6079a059a2c0549cdecbe27d_JaffaCakes118

    • Size

      1.1MB

    • MD5

      65c4936e6079a059a2c0549cdecbe27d

    • SHA1

      d50494f6fee5d5213424b6f78b3019c698d95add

    • SHA256

      397d284b4edcd3d78c129acc7198c864b03bda822a4e5894bf8f69ee91fca38f

    • SHA512

      2dacf21d9d89950a851e595d8d56177b8cd45d9cc8584f453c0132a7d42e83b9325f85bb1d8c25acfc9627be67221eca044216491059f349ac350545cc8b7592

    • SSDEEP

      12288:vsM+aTA3c+FK1vrlVYBVignBtZnfVq4cz1i5pP9kPQK:UV4W8hqBYgnBLfVqx1Wjk3

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks