Overview

overview

8

Static

static

3

.exe

windows7-x64

8

.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    69500338f3967b7f72bcd148fa214faf_JaffaCakes118

  • Size

    154KB

  • Sample

    240523-b1pckahb22

  • MD5

    69500338f3967b7f72bcd148fa214faf

  • SHA1

    5c9145b9eac2ef1d533f60d77c0c782468d78db2

  • SHA256

    b58229050f0ce7b50ca9cef8ca872743c5ef8a5c0957c3bfeb4e2271612bc412

  • SHA512

    35554fa800fd44a02fbed2574f57428f76f1764e85d1e9c3d75704ccddebc6c4ee2d0d9e1fe97d478fd1f8a34fd3d3e01e3c63cae91b6ebb4511f7831e2adc72

  • SSDEEP

    3072:4CA4fZN8umH/RUiL3Igl1uQ5dHb+Kl3+zEHiN2JSpoA:Scn8uA/ZHH5dHb+AGh/

Score
8/10
discovery

Malware Config

Targets

    • Target

      .exe

    • Size

      241KB

    • MD5

      fd66ad744b4ac44881aec78b82792bfa

    • SHA1

      942703c06198a7c8929e2a2da82c9b0713653d6e

    • SHA256

      1d452ac3158f4353caead71ec3424dd12c543cec45d9b8739ea2e86fcd48fa51

    • SHA512

      fae353c41169d3f2a748744bb75935ef3acfcbda6c7472abbe79bf2c332ba90c1eecb1fd4a523bcb6422e488dc8d8f446103e202cc0026f61e7cdbe5615558da

    • SSDEEP

      6144:JZXBsWqsE/Ao+mv8Qv0LVmwq4FU0nN876WWhE:XXmwRo+mv8QD4+0N46WW+

    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks