Overview

overview

7

Static

static

3

062a52024a...18.exe

windows7-x64

7

062a52024a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    062a52024a60ad55813654ede1bcab9c_JaffaCakes118

  • Size

    812KB

  • Sample

    240620-p4wgyaserj

  • MD5

    062a52024a60ad55813654ede1bcab9c

  • SHA1

    8eed64f31f62adfdb86c844dfb15d7f4c885085c

  • SHA256

    c2d8a252306ab22043f21d28473e36754b85add10368004ea5260e7123cb0a94

  • SHA512

    e7511ea1b8c435997d25215229b47323b923fd3a53ed881046f69e538f5ab8028378a4ace0df133cf87eb5bf76e8858e625ed32adc425c83d5a29f77c0f982f8

  • SSDEEP

    24576:YgNYvIOvPnjGM6xxJ60mVI/ba0xuVmrkAMlNFunUDR7:YggIWWxxJ6Z47xOskASFSUB

Score
7/10

Malware Config

Targets

    • Target

      062a52024a60ad55813654ede1bcab9c_JaffaCakes118

    • Size

      812KB

    • MD5

      062a52024a60ad55813654ede1bcab9c

    • SHA1

      8eed64f31f62adfdb86c844dfb15d7f4c885085c

    • SHA256

      c2d8a252306ab22043f21d28473e36754b85add10368004ea5260e7123cb0a94

    • SHA512

      e7511ea1b8c435997d25215229b47323b923fd3a53ed881046f69e538f5ab8028378a4ace0df133cf87eb5bf76e8858e625ed32adc425c83d5a29f77c0f982f8

    • SSDEEP

      24576:YgNYvIOvPnjGM6xxJ60mVI/ba0xuVmrkAMlNFunUDR7:YggIWWxxJ6Z47xOskASFSUB

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks