Overview

overview

8

Static

static

3

0363612070...18.exe

windows7-x64

8

0363612070...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    036361207082011c352e892beaf972f4_JaffaCakes118

  • Size

    17KB

  • Sample

    240620-gkm3fswhrp

  • MD5

    036361207082011c352e892beaf972f4

  • SHA1

    97f739ecb07d12f18e6d6a4b925112d819f428e0

  • SHA256

    4af3004a8a95ee935d7dadbb800db7c66a6639b7a259c680691b30039bf10331

  • SHA512

    0cecc01cf1c1d651dad240b0391703e2531b45c22f8f91469187b7938434dac61f2b306bd8f4c78031a58a50085225c36bb50fa86eae8d2ac5ca5453aa55475d

  • SSDEEP

    384:RSwUacjDzyWx2NuoGYWRyGIeoqpf8o5FsTi9FmeuR:rV6WCoG1RyGIet8ovsTEqR

Score
8/10
persistence

Malware Config

Targets

    • Target

      036361207082011c352e892beaf972f4_JaffaCakes118

    • Size

      17KB

    • MD5

      036361207082011c352e892beaf972f4

    • SHA1

      97f739ecb07d12f18e6d6a4b925112d819f428e0

    • SHA256

      4af3004a8a95ee935d7dadbb800db7c66a6639b7a259c680691b30039bf10331

    • SHA512

      0cecc01cf1c1d651dad240b0391703e2531b45c22f8f91469187b7938434dac61f2b306bd8f4c78031a58a50085225c36bb50fa86eae8d2ac5ca5453aa55475d

    • SSDEEP

      384:RSwUacjDzyWx2NuoGYWRyGIeoqpf8o5FsTi9FmeuR:rV6WCoG1RyGIet8ovsTEqR

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks