Overview

overview

7

Static

static

3

160f3443a8...18.exe

windows7-x64

7

160f3443a8...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    160f3443a8164485f5701b4d1bc634bc_JaffaCakes118

  • Size

    64KB

  • Sample

    240627-py62gssbmd

  • MD5

    160f3443a8164485f5701b4d1bc634bc

  • SHA1

    b50abbc3a8740cc6df5c66eb82422cb0bdb65d93

  • SHA256

    08ba7fdc2f3dfcc9314387670b3d8547044d7ca7a2ca2f4fd710fd8345ece3a9

  • SHA512

    6380a78175d6a1fc3ec280356d0d1f26e02fafc978538d6ef558262032c02956d48b8f6e8adfe010955db5b21a1d50ffc4c4ffea44c99135b94e9ddf27251d39

  • SSDEEP

    768:a4l7h1+Eipu19xzHQxRHvO7pHXXOP11te+sYH0JmJiEatqbla15R2yW4U6m:a4XJbxoUXw11teFYH04Jr6m

Score
7/10
persistence

Malware Config

Targets

    • Target

      160f3443a8164485f5701b4d1bc634bc_JaffaCakes118

    • Size

      64KB

    • MD5

      160f3443a8164485f5701b4d1bc634bc

    • SHA1

      b50abbc3a8740cc6df5c66eb82422cb0bdb65d93

    • SHA256

      08ba7fdc2f3dfcc9314387670b3d8547044d7ca7a2ca2f4fd710fd8345ece3a9

    • SHA512

      6380a78175d6a1fc3ec280356d0d1f26e02fafc978538d6ef558262032c02956d48b8f6e8adfe010955db5b21a1d50ffc4c4ffea44c99135b94e9ddf27251d39

    • SSDEEP

      768:a4l7h1+Eipu19xzHQxRHvO7pHXXOP11te+sYH0JmJiEatqbla15R2yW4U6m:a4XJbxoUXw11teFYH04Jr6m

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks