Overview

overview

10

Static

static

3

0b5c94dcf8...18.exe

windows7-x64

10

0b5c94dcf8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b5c94dcf8181ef61ccf095438b564ae_JaffaCakes118

  • Size

    2.8MB

  • Sample

    240624-3vmekascjm

  • MD5

    0b5c94dcf8181ef61ccf095438b564ae

  • SHA1

    7c68a55de8a9e751a6b5b48757f777784990d771

  • SHA256

    38ec7d73f77d903008eea78987181535582d01bb99f8930c3f0bbffbc184571b

  • SHA512

    125a6cf5108ccb4152bfa9eff4816606d87f0a4cc4a53a85374584eea2d7ca317ceba0c0c55d244aa97108e55b1940d01a00c101c895b310b72c0b277dfeb58f

  • SSDEEP

    49152:6uQY2kHzfHkSSPcrAaUbzrbgeyEPZSA6e+3cmEZizD+Ta12Y9/FDngeW:zQ+HzfnrMbzHgePPAN3c1Z6hUY96Z

Score
10/10
persistence

Malware Config

Targets

    • Target

      0b5c94dcf8181ef61ccf095438b564ae_JaffaCakes118

    • Size

      2.8MB

    • MD5

      0b5c94dcf8181ef61ccf095438b564ae

    • SHA1

      7c68a55de8a9e751a6b5b48757f777784990d771

    • SHA256

      38ec7d73f77d903008eea78987181535582d01bb99f8930c3f0bbffbc184571b

    • SHA512

      125a6cf5108ccb4152bfa9eff4816606d87f0a4cc4a53a85374584eea2d7ca317ceba0c0c55d244aa97108e55b1940d01a00c101c895b310b72c0b277dfeb58f

    • SSDEEP

      49152:6uQY2kHzfHkSSPcrAaUbzrbgeyEPZSA6e+3cmEZizD+Ta12Y9/FDngeW:zQ+HzfnrMbzHgePPAN3c1Z6hUY96Z

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks