Overview

overview

7

Static

static

3

156475707b...18.exe

windows7-x64

7

156475707b...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    156475707b5862c58f037160f3b04366_JaffaCakes118

  • Size

    32KB

  • Sample

    240627-kt2travhlq

  • MD5

    156475707b5862c58f037160f3b04366

  • SHA1

    687f609af57067f005d3df4b54eea478943e92b5

  • SHA256

    64d5e96a5283c734f8ed1f7f06e066b8dcf8325538d5ba8ecf26d1783874d18c

  • SHA512

    1a2e6a87888b819367af3ba617a83cfbac38d7d675a39f7189acca3f0205f028d9c53e827c810d94a752f6dec7e8fb4746a5f795637b797322df0d6e3f459e7b

  • SSDEEP

    384:+9NQq9F6wEvq2wJVtE09EBg77Eim3PbQEehS1lpio7:+rQqT/EvqFLtEUoim3Pb3Ay

Score
7/10
persistence

Malware Config

Targets

    • Target

      156475707b5862c58f037160f3b04366_JaffaCakes118

    • Size

      32KB

    • MD5

      156475707b5862c58f037160f3b04366

    • SHA1

      687f609af57067f005d3df4b54eea478943e92b5

    • SHA256

      64d5e96a5283c734f8ed1f7f06e066b8dcf8325538d5ba8ecf26d1783874d18c

    • SHA512

      1a2e6a87888b819367af3ba617a83cfbac38d7d675a39f7189acca3f0205f028d9c53e827c810d94a752f6dec7e8fb4746a5f795637b797322df0d6e3f459e7b

    • SSDEEP

      384:+9NQq9F6wEvq2wJVtE09EBg77Eim3PbQEehS1lpio7:+rQqT/EvqFLtEUoim3Pb3Ay

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks