Overview

overview

7

Static

static

3

14b13791bd...18.exe

windows7-x64

7

14b13791bd...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    14b13791bd771ba7fe966fe966445740_JaffaCakes118

  • Size

    39KB

  • Sample

    240627-e5pqnsvfmm

  • MD5

    14b13791bd771ba7fe966fe966445740

  • SHA1

    3d7207afb72f43963daf95b74214598755a91d8d

  • SHA256

    0582e9cafdc5fcaec37ca1f1127081d3f44262bfdcfe14febcc368d197efc761

  • SHA512

    5be0f3307d97bc2ea0c3d8297c9d3f8e3e1954697b1348b6173105f4e7d978b57a80ddc4e13c7a025177d318e698553d094060a2bde2705a1f3cb50728c9a82e

  • SSDEEP

    768:NCdtjTDBX2Xqte+vXwA3RMLTnmjhNOVwCYur/2d:NCdt9GNiwA3iej2VwhEu

Score
7/10

Malware Config

Targets

    • Target

      14b13791bd771ba7fe966fe966445740_JaffaCakes118

    • Size

      39KB

    • MD5

      14b13791bd771ba7fe966fe966445740

    • SHA1

      3d7207afb72f43963daf95b74214598755a91d8d

    • SHA256

      0582e9cafdc5fcaec37ca1f1127081d3f44262bfdcfe14febcc368d197efc761

    • SHA512

      5be0f3307d97bc2ea0c3d8297c9d3f8e3e1954697b1348b6173105f4e7d978b57a80ddc4e13c7a025177d318e698553d094060a2bde2705a1f3cb50728c9a82e

    • SSDEEP

      768:NCdtjTDBX2Xqte+vXwA3RMLTnmjhNOVwCYur/2d:NCdt9GNiwA3iej2VwhEu

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks