Overview

overview

7

Static

static

3

1879c26c93...18.exe

windows7-x64

7

1879c26c93...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1879c26c93d1650d823d2c980d32151e_JaffaCakes118

  • Size

    41KB

  • Sample

    240628-c2nm4azajn

  • MD5

    1879c26c93d1650d823d2c980d32151e

  • SHA1

    a47f663bd2f0acc157b731545e582250052b6188

  • SHA256

    5162aec8b745d8ca05b24497eb3107688356b639aa96db384b11f11223f8c930

  • SHA512

    d7391cd38b70cc534433744658ebb9e0ca0050d0b645d5d50195a23e4767200494d4ae68a6f848b1a0500327df745f0bedf1f43ad867f943a1cd0e1ad2306228

  • SSDEEP

    768:F9Z1p/ija+1ImN6Kba5uPfFNtDo7YLu5lEPCbbdcxeDuNRtCPF3z:F9ZqDba5sLCfPbb2xzSz

Score
7/10
persistence

Malware Config

Targets

    • Target

      1879c26c93d1650d823d2c980d32151e_JaffaCakes118

    • Size

      41KB

    • MD5

      1879c26c93d1650d823d2c980d32151e

    • SHA1

      a47f663bd2f0acc157b731545e582250052b6188

    • SHA256

      5162aec8b745d8ca05b24497eb3107688356b639aa96db384b11f11223f8c930

    • SHA512

      d7391cd38b70cc534433744658ebb9e0ca0050d0b645d5d50195a23e4767200494d4ae68a6f848b1a0500327df745f0bedf1f43ad867f943a1cd0e1ad2306228

    • SSDEEP

      768:F9Z1p/ija+1ImN6Kba5uPfFNtDo7YLu5lEPCbbdcxeDuNRtCPF3z:F9ZqDba5sLCfPbb2xzSz

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks