Overview

overview

7

Static

static

3

1c1d641c05...18.exe

windows7-x64

6

1c1d641c05...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c1d641c05dbb6f7c999e2dff821dd8d_JaffaCakes118

  • Size

    80KB

  • Sample

    240701-xgnskstcrc

  • MD5

    1c1d641c05dbb6f7c999e2dff821dd8d

  • SHA1

    c551c0ced42559534f42551267ea3d1a5444a9d5

  • SHA256

    39c3e3f1269e45705be897c478a8f654adb5d91f0d3c1da88b03bfcc42e09f21

  • SHA512

    3e5bc5bf94036425437dbe38d015219a0599b0b415ce64acd961518c53f09b3a5243c6ac877c22e303a5f0e1a243a1c678b2992fbe7ee075e0c8b8f12a41790d

  • SSDEEP

    1536:k8MyEcYubhirE4lNOzfOtljSGsAoga3oBFfd7VrlkBVlJGy0uSd3Q:mR/ulirE4mzfODOGVoroBxdjk3HlSa

Score
7/10
persistence

Malware Config

Targets

    • Target

      1c1d641c05dbb6f7c999e2dff821dd8d_JaffaCakes118

    • Size

      80KB

    • MD5

      1c1d641c05dbb6f7c999e2dff821dd8d

    • SHA1

      c551c0ced42559534f42551267ea3d1a5444a9d5

    • SHA256

      39c3e3f1269e45705be897c478a8f654adb5d91f0d3c1da88b03bfcc42e09f21

    • SHA512

      3e5bc5bf94036425437dbe38d015219a0599b0b415ce64acd961518c53f09b3a5243c6ac877c22e303a5f0e1a243a1c678b2992fbe7ee075e0c8b8f12a41790d

    • SSDEEP

      1536:k8MyEcYubhirE4lNOzfOtljSGsAoga3oBFfd7VrlkBVlJGy0uSd3Q:mR/ulirE4mzfODOGVoroBxdjk3HlSa

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks