Overview

overview

8

Static

static

3

158617d91e...18.exe

windows7-x64

8

158617d91e...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    158617d91e975dbc8c9e01ac142657fd_JaffaCakes118

  • Size

    210KB

  • Sample

    240627-lnbwtaxcqk

  • MD5

    158617d91e975dbc8c9e01ac142657fd

  • SHA1

    79e00967258229c1e89d3faf71babd10e50f6344

  • SHA256

    da4ffe3b37d5c5ff963fd4945edcb8e50717657b91ee11b37bc3fb3041bdc41c

  • SHA512

    7dbc5cfc401480cf518dfc50f85b5ab8049ddaed756b5e084d548570d3a393146a5903916232fdc4d63b8ae757a991f1e352e01920acd2c8830677d3b407e0ba

  • SSDEEP

    3072:SDhlmTbbok6+H1dIQqG1j7UZuVIdkB/173EuxGyEKx5jvOVgSLqYE7U1u9vIiz7:Cq6m1d2G1j7UZuVIK7LEujEKfWWbYun

Score
8/10
persistence

Malware Config

Targets

    • Target

      158617d91e975dbc8c9e01ac142657fd_JaffaCakes118

    • Size

      210KB

    • MD5

      158617d91e975dbc8c9e01ac142657fd

    • SHA1

      79e00967258229c1e89d3faf71babd10e50f6344

    • SHA256

      da4ffe3b37d5c5ff963fd4945edcb8e50717657b91ee11b37bc3fb3041bdc41c

    • SHA512

      7dbc5cfc401480cf518dfc50f85b5ab8049ddaed756b5e084d548570d3a393146a5903916232fdc4d63b8ae757a991f1e352e01920acd2c8830677d3b407e0ba

    • SSDEEP

      3072:SDhlmTbbok6+H1dIQqG1j7UZuVIdkB/173EuxGyEKx5jvOVgSLqYE7U1u9vIiz7:Cq6m1d2G1j7UZuVIK7LEujEKfWWbYun

    Score
    8/10
    persistence

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks