Overview

overview

8

Static

static

1

0755ebd4a6...18.vbs

windows7-x64

7

0755ebd4a6...18.vbs

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0755ebd4a69d914a100f1c13598dbb85_JaffaCakes118

  • Size

    3KB

  • Sample

    240624-jxe9gsvglp

  • MD5

    0755ebd4a69d914a100f1c13598dbb85

  • SHA1

    1cc0e094b8293092517b8da35cc7f21b2588d869

  • SHA256

    468e1008a981a6c87dc8f4e0fe590d25fdedc8d58969705e9d1268b0ea202221

  • SHA512

    3f78224c147a301ea6c58eed74666fddbe4983a2e0d43791be7bbcf41ce55191487b1d60413ec548dffe3d4a8f7a132eb5e1b5a3352535017502daf182b4db19

Score
8/10

Malware Config

Targets

    • Target

      0755ebd4a69d914a100f1c13598dbb85_JaffaCakes118

    • Size

      3KB

    • MD5

      0755ebd4a69d914a100f1c13598dbb85

    • SHA1

      1cc0e094b8293092517b8da35cc7f21b2588d869

    • SHA256

      468e1008a981a6c87dc8f4e0fe590d25fdedc8d58969705e9d1268b0ea202221

    • SHA512

      3f78224c147a301ea6c58eed74666fddbe4983a2e0d43791be7bbcf41ce55191487b1d60413ec548dffe3d4a8f7a132eb5e1b5a3352535017502daf182b4db19

    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks