Overview

overview

7

Static

static

3

259b8d6582...18.exe

windows7-x64

7

259b8d6582...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    259b8d65823262095a65c18722531f36_JaffaCakes118

  • Size

    127KB

  • Sample

    240704-vkrmjazcrp

  • MD5

    259b8d65823262095a65c18722531f36

  • SHA1

    a39b989d04b4cd60b07e918c8cfd1039acc03efc

  • SHA256

    c54c462eeb31de9654b1ec97ca2d731937582d104ccd82dd8c6b9fd75c85ad4c

  • SHA512

    3245d07f19d4a357462e1647372d7c732f34cd953c93c6087cb7482a989d0cc14b3028111cef2e349f80e5343df49cee38ae70b213913b7a358b051271037976

  • SSDEEP

    3072:sXqmPW+E0K7IbvJfGSl5Ygr35NjMS7RV/96lNd7eD4hTrT/+w:sXqmdEz7Ijo457klNdCyl

Score
7/10
persistence

Malware Config

Targets

    • Target

      259b8d65823262095a65c18722531f36_JaffaCakes118

    • Size

      127KB

    • MD5

      259b8d65823262095a65c18722531f36

    • SHA1

      a39b989d04b4cd60b07e918c8cfd1039acc03efc

    • SHA256

      c54c462eeb31de9654b1ec97ca2d731937582d104ccd82dd8c6b9fd75c85ad4c

    • SHA512

      3245d07f19d4a357462e1647372d7c732f34cd953c93c6087cb7482a989d0cc14b3028111cef2e349f80e5343df49cee38ae70b213913b7a358b051271037976

    • SSDEEP

      3072:sXqmPW+E0K7IbvJfGSl5Ygr35NjMS7RV/96lNd7eD4hTrT/+w:sXqmdEz7Ijo457klNdCyl

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks