Overview

overview

7

Static

static

3

0515bde50e...18.dll

windows7-x64

6

0515bde50e...18.dll

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0515bde50e2933137bf9313bf1ac737b_JaffaCakes118

  • Size

    192KB

  • Sample

    240620-mbw7nawepp

  • MD5

    0515bde50e2933137bf9313bf1ac737b

  • SHA1

    12f23ec8dbb65c867a4f2749d17c2b02837f468e

  • SHA256

    fd9d9940204bada08cb032073e61c463ce8ef51aa506fffd7c5feecfc9666654

  • SHA512

    363b6a142a5ad29d2cee27ba165f76f8ffabe0c87818ecc294442da859925cc747dfabb23325c9898d6f1ea96191e03a53d747bd73de88a6ba73c618769fc0e4

  • SSDEEP

    3072:dIcwUt9Yw/B50/K27lvfTBf5p0/j6wFgnTzT5t9cdkcasnV9rlsP:nwqP+/KGlvfTBhe/jIdLO9VFlu

Score
7/10
persistence

Malware Config

Targets

    • Target

      0515bde50e2933137bf9313bf1ac737b_JaffaCakes118

    • Size

      192KB

    • MD5

      0515bde50e2933137bf9313bf1ac737b

    • SHA1

      12f23ec8dbb65c867a4f2749d17c2b02837f468e

    • SHA256

      fd9d9940204bada08cb032073e61c463ce8ef51aa506fffd7c5feecfc9666654

    • SHA512

      363b6a142a5ad29d2cee27ba165f76f8ffabe0c87818ecc294442da859925cc747dfabb23325c9898d6f1ea96191e03a53d747bd73de88a6ba73c618769fc0e4

    • SSDEEP

      3072:dIcwUt9Yw/B50/K27lvfTBf5p0/j6wFgnTzT5t9cdkcasnV9rlsP:nwqP+/KGlvfTBhe/jIdLO9VFlu

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks