Overview

overview

10

Static

static

3

a3583c9b2b...18.exe

windows7-x64

10

a3583c9b2b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    a3583c9b2b0482d19d63baa128d05d74_JaffaCakes118
  • Size 358KB
  • Sample240613-brnpnsyfpg
  • SHA256 2fd8faefcb4ee0994cf43097fbed2e71bf3e7c750f149794e46644607b0f014b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
execution

Malware Config

Extracted

Language

  • ps1

Deobfuscated
Source
URLs
  • ps1.dropper

    https://onedrive.live.com/download?cid=2E8B1C0AD01C16B2&resid=2E8B1C0AD01C16B2%21129&authkey=AC3fU3DAOj4gDVw

Targets

    • Target
      a3583c9b2b0482d19d63baa128d05d74_JaffaCakes118
    • Size 358KB
    • SHA256 2fd8faefcb4ee0994cf43097fbed2e71bf3e7c750f149794e46644607b0f014b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks