Overview

overview

8

Static

static

3

02c5b014c1...18.exe

windows7-x64

8

02c5b014c1...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02c5b014c1f35449be73aa3989aa9752_JaffaCakes118

  • Size

    494KB

  • Sample

    240620-eztsfashnk

  • MD5

    02c5b014c1f35449be73aa3989aa9752

  • SHA1

    3d5b95bd472dac8ee39f774aaf6224ec4f4de263

  • SHA256

    f0c0480082c004272fc5038e61a2d1db3890182321c4ed5fdb831bdc35d68cba

  • SHA512

    40826cf9fb4ba8148fa7465a0490ba1ad94ea963441b654a95d37caba3f001b7432ea93bfd6f1aefb5a21149c1b9a8c72bf2f5ec45868e405060416621dc6e90

  • SSDEEP

    12288:VokHg3IpIlaUS2k0XmaS7s8yF3Z4mxxVVI/TAaH9FYMquQptuKEqlJ:5AYKlaUlOs8yQmXnIkaHpqfu/qlJ

Score
8/10
persistence

Malware Config

Targets

    • Target

      02c5b014c1f35449be73aa3989aa9752_JaffaCakes118

    • Size

      494KB

    • MD5

      02c5b014c1f35449be73aa3989aa9752

    • SHA1

      3d5b95bd472dac8ee39f774aaf6224ec4f4de263

    • SHA256

      f0c0480082c004272fc5038e61a2d1db3890182321c4ed5fdb831bdc35d68cba

    • SHA512

      40826cf9fb4ba8148fa7465a0490ba1ad94ea963441b654a95d37caba3f001b7432ea93bfd6f1aefb5a21149c1b9a8c72bf2f5ec45868e405060416621dc6e90

    • SSDEEP

      12288:VokHg3IpIlaUS2k0XmaS7s8yF3Z4mxxVVI/TAaH9FYMquQptuKEqlJ:5AYKlaUlOs8yQmXnIkaHpqfu/qlJ

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks