Overview

overview

5

Static

static

1

b7dc69e343...18.exe

windows7-x64

4

b7dc69e343...18.exe

windows10-2004-x64

5

$_3_.exe

windows7-x64

3

$_3_.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7dc69e343603e99dee4ed51ce39fce7_JaffaCakes118

  • Size

    779KB

  • Sample

    240617-larp4svakc

  • MD5

    b7dc69e343603e99dee4ed51ce39fce7

  • SHA1

    6a5bb8768f434bf3bdbd679ae05377932671de89

  • SHA256

    856be80198034f9fabda3f15e7c17e5bb51fa95b38e5d62f448e4ae59cd6d21c

  • SHA512

    c21212f9d8d389b2fe9acedd726ec4c6a3bbd37414e84ac297a7e36462e17e83404670623d2e913d901247c16e1c7a38b21d6987810e97a3f422237c99b40b93

  • SSDEEP

    24576:WteurdvnsolYQpuMX14GZdvfAe8xDDgHB5LcmrKBD:WVVsJQd1V4N9DY5Lu

Score
5/10

Malware Config

Targets

    • Target

      b7dc69e343603e99dee4ed51ce39fce7_JaffaCakes118

    • Size

      779KB

    • MD5

      b7dc69e343603e99dee4ed51ce39fce7

    • SHA1

      6a5bb8768f434bf3bdbd679ae05377932671de89

    • SHA256

      856be80198034f9fabda3f15e7c17e5bb51fa95b38e5d62f448e4ae59cd6d21c

    • SHA512

      c21212f9d8d389b2fe9acedd726ec4c6a3bbd37414e84ac297a7e36462e17e83404670623d2e913d901247c16e1c7a38b21d6987810e97a3f422237c99b40b93

    • SSDEEP

      24576:WteurdvnsolYQpuMX14GZdvfAe8xDDgHB5LcmrKBD:WVVsJQd1V4N9DY5Lu

    Score
    5/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

    • Target

      $_3_

    • Size

      1.7MB

    • MD5

      c4ca24ec91ced69fc98fac6fba21dc88

    • SHA1

      b84f3a1ceef89673e31e0be210eb33d865d60659

    • SHA256

      c690bea2115b2a16e23c845785772d14fdb978d32cb22bbbce83f53673eda821

    • SHA512

      5783d1b8599d472039e9afca35590f76fe8930c73af4fa35fb796e819ca6d7219bd7ba1a0a6bcf3e8d76e9d873a078d74857a2318f8bbc3eca34c051a9ca4d41

    • SSDEEP

      49152:27mrmYPoEHVGTWFkO4ITVpSuECY/vrM3rA3SuNM:Nm2Z12WFYFJ+

    Score
    5/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks