Overview

overview

7

Static

static

3

6870989fa0...18.exe

windows7-x64

3

6870989fa0...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6870989fa0fa2d174a2e3400eecfb700_JaffaCakes118

  • Size

    191KB

  • Sample

    240522-yrlawaed9s

  • MD5

    6870989fa0fa2d174a2e3400eecfb700

  • SHA1

    5958c1671a18eb8202e2041bc743439980fa14fa

  • SHA256

    3d06334678f312498958945296b93df0a610358c870a0a039e0605d2ee45d560

  • SHA512

    0492f351b82ded840b19d5733790ed7f3185921a088125e9586ed2dd8f727e814e11c7c04726361aa7141f24891eb0d729e398312af1444fe18786fe0c1c9e28

  • SSDEEP

    3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dt:HAVySV1eY4k437d+4wkTHdS2F

Score
7/10

Malware Config

Targets

    • Target

      6870989fa0fa2d174a2e3400eecfb700_JaffaCakes118

    • Size

      191KB

    • MD5

      6870989fa0fa2d174a2e3400eecfb700

    • SHA1

      5958c1671a18eb8202e2041bc743439980fa14fa

    • SHA256

      3d06334678f312498958945296b93df0a610358c870a0a039e0605d2ee45d560

    • SHA512

      0492f351b82ded840b19d5733790ed7f3185921a088125e9586ed2dd8f727e814e11c7c04726361aa7141f24891eb0d729e398312af1444fe18786fe0c1c9e28

    • SSDEEP

      3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dt:HAVySV1eY4k437d+4wkTHdS2F

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks