Overview

overview

7

Static

static

3

1a840a3c70...18.exe

windows7-x64

7

1a840a3c70...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a840a3c705ef55e0ed6262ac41d516a_JaffaCakes118

  • Size

    267KB

  • Sample

    240701-jtfqvatdkr

  • MD5

    1a840a3c705ef55e0ed6262ac41d516a

  • SHA1

    ab570527a9f49389c6aa4ac4b55249eaa86b1cca

  • SHA256

    9d086957c0c5144e230854368a6b0eee11256b3797e194197b35cbfc91ffe825

  • SHA512

    62088596d2f3ad6a85abb0a71ca7571e2c88a9c65bccfa1065cfbe6c1783cf2850e102b7864789962a607167b10bebb1c6c37a95b5eb173f3cb5f079028c64d1

  • SSDEEP

    3072:kxvypKnQxFIsBEs6ijRj7v5tAvSNZHd0VYclOL2ZPhwo1XrwFEP4h:GU0sX5LtGSNaYc3Z1XrwFEP4h

Score
7/10

Malware Config

Targets

    • Target

      1a840a3c705ef55e0ed6262ac41d516a_JaffaCakes118

    • Size

      267KB

    • MD5

      1a840a3c705ef55e0ed6262ac41d516a

    • SHA1

      ab570527a9f49389c6aa4ac4b55249eaa86b1cca

    • SHA256

      9d086957c0c5144e230854368a6b0eee11256b3797e194197b35cbfc91ffe825

    • SHA512

      62088596d2f3ad6a85abb0a71ca7571e2c88a9c65bccfa1065cfbe6c1783cf2850e102b7864789962a607167b10bebb1c6c37a95b5eb173f3cb5f079028c64d1

    • SSDEEP

      3072:kxvypKnQxFIsBEs6ijRj7v5tAvSNZHd0VYclOL2ZPhwo1XrwFEP4h:GU0sX5LtGSNaYc3Z1XrwFEP4h

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks