Overview

overview

7

Static

static

3

2717d7f0bc...18.exe

windows7-x64

7

2717d7f0bc...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2717d7f0bcc2656f64cb94eb3a59eb4d_JaffaCakes118

  • Size

    40KB

  • Sample

    240705-yxkarsxclb

  • MD5

    2717d7f0bcc2656f64cb94eb3a59eb4d

  • SHA1

    978a75e306545cb64357b0057966a48eaa0e47a0

  • SHA256

    0df3b3d2c52692e7898517cbc1991cdb15a816230ae2dde66ad700c269962306

  • SHA512

    b65b14db5907cab444e1d03cc223c41bbfab10ef9d6061e2feb72422bf2ba8d615ab05f5feef9ea0a18737dba5125cf4ea3c00ae6cb0521546f193253e0a7c26

  • SSDEEP

    768:11EuZDk8+8wTTGsiBwfOKJEK6SlaQ1XwmGf:HDpk/Etw2S0M1ns

Score
7/10
persistence

Malware Config

Targets

    • Target

      2717d7f0bcc2656f64cb94eb3a59eb4d_JaffaCakes118

    • Size

      40KB

    • MD5

      2717d7f0bcc2656f64cb94eb3a59eb4d

    • SHA1

      978a75e306545cb64357b0057966a48eaa0e47a0

    • SHA256

      0df3b3d2c52692e7898517cbc1991cdb15a816230ae2dde66ad700c269962306

    • SHA512

      b65b14db5907cab444e1d03cc223c41bbfab10ef9d6061e2feb72422bf2ba8d615ab05f5feef9ea0a18737dba5125cf4ea3c00ae6cb0521546f193253e0a7c26

    • SSDEEP

      768:11EuZDk8+8wTTGsiBwfOKJEK6SlaQ1XwmGf:HDpk/Etw2S0M1ns

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks