Overview

overview

8

Static

static

3

01fe14e5e6...18.exe

windows7-x64

8

01fe14e5e6...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    01fe14e5e6bd72db538449a3d5ac78b2_JaffaCakes118

  • Size

    100KB

  • Sample

    240620-csa1mstcke

  • MD5

    01fe14e5e6bd72db538449a3d5ac78b2

  • SHA1

    83fc057603c7fccfbb62297be52021117e8e7481

  • SHA256

    3b1a9de09e1d550d50a5f3b54e8cba4498500f9cf8f0160eae52a2cbe22a1b40

  • SHA512

    93ce7c25072eb482114ed50e8b036c40fb511a5f203e32d8de34841fde9a7955b452ea3f03861186c4140230d8ee394fb92c4166db56853f16d3dcf67d8b591a

  • SSDEEP

    3072:19dTBEH7rVeZb50zCXnu9NvgSM1sYt0Jd:Q0ZFNS7YiJd

Score
8/10
persistence

Malware Config

Targets

    • Target

      01fe14e5e6bd72db538449a3d5ac78b2_JaffaCakes118

    • Size

      100KB

    • MD5

      01fe14e5e6bd72db538449a3d5ac78b2

    • SHA1

      83fc057603c7fccfbb62297be52021117e8e7481

    • SHA256

      3b1a9de09e1d550d50a5f3b54e8cba4498500f9cf8f0160eae52a2cbe22a1b40

    • SHA512

      93ce7c25072eb482114ed50e8b036c40fb511a5f203e32d8de34841fde9a7955b452ea3f03861186c4140230d8ee394fb92c4166db56853f16d3dcf67d8b591a

    • SSDEEP

      3072:19dTBEH7rVeZb50zCXnu9NvgSM1sYt0Jd:Q0ZFNS7YiJd

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks