Overview

overview

10

Static

static

3

1885ac3216...18.exe

windows7-x64

10

1885ac3216...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1885ac32164a3c3fb975282fd657af8b_JaffaCakes118

  • Size

    33KB

  • Sample

    240628-db6lnaxdnc

  • MD5

    1885ac32164a3c3fb975282fd657af8b

  • SHA1

    4fa06d53f0fb773eebfb57ec9ce59da866821daf

  • SHA256

    be72468b4c52745c92edfeb0668423da6ff8313237eeb18668913ec7a479ebf0

  • SHA512

    85a7b0f4a85f3e16bec4dc35bce6e289869445f705d817e25029d87998af6b2094fd28b28836990dc5582141cd4c4e50befa989487e243ddfcf3581eba1100ec

  • SSDEEP

    384:Gr9MUfDopREmd3yghuQtmJuLnfGFpm4ZNPq53m6Cjyg/v1PwJA3d7i4C+zrZ1xV4:Kzf01JyrlJUf8pmD+G0gKxydcXFy/

Score
10/10
persistence

Malware Config

Targets

    • Target

      1885ac32164a3c3fb975282fd657af8b_JaffaCakes118

    • Size

      33KB

    • MD5

      1885ac32164a3c3fb975282fd657af8b

    • SHA1

      4fa06d53f0fb773eebfb57ec9ce59da866821daf

    • SHA256

      be72468b4c52745c92edfeb0668423da6ff8313237eeb18668913ec7a479ebf0

    • SHA512

      85a7b0f4a85f3e16bec4dc35bce6e289869445f705d817e25029d87998af6b2094fd28b28836990dc5582141cd4c4e50befa989487e243ddfcf3581eba1100ec

    • SSDEEP

      384:Gr9MUfDopREmd3yghuQtmJuLnfGFpm4ZNPq53m6Cjyg/v1PwJA3d7i4C+zrZ1xV4:Kzf01JyrlJUf8pmD+G0gKxydcXFy/

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks