Overview

overview

7

Static

static

1

9d7f7d4191...18.exe

windows7-x64

7

9d7f7d4191...18.exe

windows10-2004-x64

7

$_3_.exe

windows7-x64

3

$_3_.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    9d7f7d41911527cb163735f35a727a96_JaffaCakes118

  • Size

    961KB

  • Sample

    240611-jvp1xazgnl

  • MD5

    9d7f7d41911527cb163735f35a727a96

  • SHA1

    2f4c6d34a9032ff33cfd106437a03edf9fb0d0b8

  • SHA256

    6bef0525e89261bc3568e82e3903252a110826d290677116330325ff1509b046

  • SHA512

    1af353cf0a546aa1762e8d08d3f187119b5fb6537fdc7f1047524062e6529fa73585f7cc1491aaad6b9c74dce1d8cb4916997aee4b6adc768c659dbd80394982

  • SSDEEP

    24576:gtXCT35bEN60Yc/rMegvH6RK1aeGokgwHF:gKBtV6MjvH6RIrDCF

Score
7/10

Malware Config

Targets

    • Target

      9d7f7d41911527cb163735f35a727a96_JaffaCakes118

    • Size

      961KB

    • MD5

      9d7f7d41911527cb163735f35a727a96

    • SHA1

      2f4c6d34a9032ff33cfd106437a03edf9fb0d0b8

    • SHA256

      6bef0525e89261bc3568e82e3903252a110826d290677116330325ff1509b046

    • SHA512

      1af353cf0a546aa1762e8d08d3f187119b5fb6537fdc7f1047524062e6529fa73585f7cc1491aaad6b9c74dce1d8cb4916997aee4b6adc768c659dbd80394982

    • SSDEEP

      24576:gtXCT35bEN60Yc/rMegvH6RK1aeGokgwHF:gKBtV6MjvH6RIrDCF

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

    • Target

      $_3_

    • Size

      1.8MB

    • MD5

      77bfacca17ee1d89833b57f3a746d9a0

    • SHA1

      aa9490c913489c5eafd02f67f875efcb56d23036

    • SHA256

      38571b0965110d07c6fbf4813ab628d4017cf52c681c457fb3f184b644fb0b52

    • SHA512

      21ecc2fce94a58cd39127964730b01722b9dafa20d3af65b023fe83188c08211ba1324849513ffc10b6a359737f98c4d06770dc1954f8880daff938a06581e6f

    • SSDEEP

      49152:/SNY8H0ZGF5j51XdQTPRPgojx1NslvUOl/WkMWAH:oY00Z8F1XdUL

    Score
    5/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks