Overview

overview

8

Static

static

3

08216af0e0...18.exe

windows7-x64

8

08216af0e0...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    08216af0e00486d27989ee284fc5fa1b_JaffaCakes118

  • Size

    27KB

  • Sample

    240620-vtdr2aydrc

  • MD5

    08216af0e00486d27989ee284fc5fa1b

  • SHA1

    69df0391ab2fbf534daa058e4f64c39a4415bb42

  • SHA256

    ec8c6c5e10f3373c5ebe3db9942e23e58ee9bab50e26771a042ccc1c20319865

  • SHA512

    7aae713b1432faabfe9aa75535beda6b637a99b3326d9b5cd6cd353f0ed7fd9b14c8a386219e6907b9072251fb12103f3cc49eba58d2c41683c936fc7f48c9fe

  • SSDEEP

    768:rHohf0FtvSMjPm7Tu+RWg6k2PLJbJ3Q+WTqGjrDa6BY:rHy0dPYxWg6bPrQ+wsp

Score
8/10

Malware Config

Targets

    • Target

      08216af0e00486d27989ee284fc5fa1b_JaffaCakes118

    • Size

      27KB

    • MD5

      08216af0e00486d27989ee284fc5fa1b

    • SHA1

      69df0391ab2fbf534daa058e4f64c39a4415bb42

    • SHA256

      ec8c6c5e10f3373c5ebe3db9942e23e58ee9bab50e26771a042ccc1c20319865

    • SHA512

      7aae713b1432faabfe9aa75535beda6b637a99b3326d9b5cd6cd353f0ed7fd9b14c8a386219e6907b9072251fb12103f3cc49eba58d2c41683c936fc7f48c9fe

    • SSDEEP

      768:rHohf0FtvSMjPm7Tu+RWg6k2PLJbJ3Q+WTqGjrDa6BY:rHy0dPYxWg6bPrQ+wsp

    Score
    8/10

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks