Overview

overview

8

Static

static

3

08c6b2e495...18.exe

windows7-x64

8

08c6b2e495...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08c6b2e495aed922f466cd63a22a5076_JaffaCakes118

  • Size

    174KB

  • Sample

    240620-xee3nasclg

  • MD5

    08c6b2e495aed922f466cd63a22a5076

  • SHA1

    f4ecf0b17dea534aa55606bd27fb13d6592b2e9c

  • SHA256

    803b1886f05978e17fa939399cc93af5fc4bf79d5c2edd4709af811871f88e28

  • SHA512

    b5321a3b240f08aa6978904e69a79c17f572054b82e40e065b94f1c63176d2c54a7b78cf8383073c35037240bef4cba3d33d7efe0d0c31126321a516724095ec

  • SSDEEP

    3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hTA9uDCpLuSvvWob2Ei2ZFjyIoT:AbXE9OiTGfhEClq9ENCotob2EZVyIoT

Score
8/10

Malware Config

Targets

    • Target

      08c6b2e495aed922f466cd63a22a5076_JaffaCakes118

    • Size

      174KB

    • MD5

      08c6b2e495aed922f466cd63a22a5076

    • SHA1

      f4ecf0b17dea534aa55606bd27fb13d6592b2e9c

    • SHA256

      803b1886f05978e17fa939399cc93af5fc4bf79d5c2edd4709af811871f88e28

    • SHA512

      b5321a3b240f08aa6978904e69a79c17f572054b82e40e065b94f1c63176d2c54a7b78cf8383073c35037240bef4cba3d33d7efe0d0c31126321a516724095ec

    • SSDEEP

      3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hTA9uDCpLuSvvWob2Ei2ZFjyIoT:AbXE9OiTGfhEClq9ENCotob2EZVyIoT

    Score
    8/10

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks