Overview

overview

7

Static

static

3

0f34742a98...18.exe

windows7-x64

7

0f34742a98...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f34742a981b954510385b84aecafca2_JaffaCakes118

  • Size

    13KB

  • Sample

    240625-xwmh3axelc

  • MD5

    0f34742a981b954510385b84aecafca2

  • SHA1

    e1d8c31b06308c8c68af55d742115e73a8f8dc08

  • SHA256

    9036e764411f475018d0c8afdf1acb80b5a557329a9ca382a079b34bc0585f88

  • SHA512

    43de0dfb1323d640585e604fce14fc85962f73d4102b94e4ed211a258b5d6ef729d754bbbed156c07a433d09626cab62ace3f056ca71198798aeb3dd153ae8f6

  • SSDEEP

    192:PqC6LeH4CFbXQs1EJAmZ60lYF2DG5PKZmtm3IJ+Sr8FyYTVjLKgqqDD5:WaYCZANJ9Z8sDG5PFtUIJGygV/KgqAD

Score
7/10
persistence

Malware Config

Targets

    • Target

      0f34742a981b954510385b84aecafca2_JaffaCakes118

    • Size

      13KB

    • MD5

      0f34742a981b954510385b84aecafca2

    • SHA1

      e1d8c31b06308c8c68af55d742115e73a8f8dc08

    • SHA256

      9036e764411f475018d0c8afdf1acb80b5a557329a9ca382a079b34bc0585f88

    • SHA512

      43de0dfb1323d640585e604fce14fc85962f73d4102b94e4ed211a258b5d6ef729d754bbbed156c07a433d09626cab62ace3f056ca71198798aeb3dd153ae8f6

    • SSDEEP

      192:PqC6LeH4CFbXQs1EJAmZ60lYF2DG5PKZmtm3IJ+Sr8FyYTVjLKgqqDD5:WaYCZANJ9Z8sDG5PFtUIJGygV/KgqAD

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks