Overview

overview

8

Static

static

3

0ede73f05c...18.exe

windows7-x64

8

0ede73f05c...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0ede73f05cfd8b403f71824949ad2d6a_JaffaCakes118

  • Size

    105KB

  • Sample

    240625-vnbeqavepk

  • MD5

    0ede73f05cfd8b403f71824949ad2d6a

  • SHA1

    cc6c7aa711b1ff54e3bce287aa9e77524ba50cee

  • SHA256

    d80c05a3fa88049b69443076de64e5f4b9d639aab0c006767e36175513da3db2

  • SHA512

    fe2a820cc5d13e3bcfb32989a3413800bcd6951cf29c401b0c89bd1b437e1da5e6fc8ef7e5ef641fcffa12144c3879b5206567bdfb7bed3540f307d84849372e

  • SSDEEP

    3072:tkvScJALJQGLzacIxTDJSsJZccRRvSsH0:tk+QGLzajxcsJZrqv

Score
8/10
persistence

Malware Config

Targets

    • Target

      0ede73f05cfd8b403f71824949ad2d6a_JaffaCakes118

    • Size

      105KB

    • MD5

      0ede73f05cfd8b403f71824949ad2d6a

    • SHA1

      cc6c7aa711b1ff54e3bce287aa9e77524ba50cee

    • SHA256

      d80c05a3fa88049b69443076de64e5f4b9d639aab0c006767e36175513da3db2

    • SHA512

      fe2a820cc5d13e3bcfb32989a3413800bcd6951cf29c401b0c89bd1b437e1da5e6fc8ef7e5ef641fcffa12144c3879b5206567bdfb7bed3540f307d84849372e

    • SSDEEP

      3072:tkvScJALJQGLzacIxTDJSsJZccRRvSsH0:tk+QGLzajxcsJZrqv

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks