Overview

overview

7

Static

static

3

28080aa236...18.exe

windows7-x64

7

28080aa236...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    28080aa236569b921c1ec036ed9f049d_JaffaCakes118

  • Size

    378KB

  • Sample

    240706-lavf1aweqb

  • MD5

    28080aa236569b921c1ec036ed9f049d

  • SHA1

    c0b660f83f5788779f5799ecd85472ff9bfcc628

  • SHA256

    1c33333466c358ad08e26d018a5d9a7bf6b79cdbd12791861bc706d319a68181

  • SHA512

    5df192abf20f92d990794f7fa43b4d683f20a5acdc97dfc3ca0be5af825558607b39dfbd0634bfd4d7b205d06f009a75a3dcd96718b4c13368a90e269b3c1be0

  • SSDEEP

    6144:MtRBp2XCaQSYllfv5oSIrmg8VSPrE00FrkEnGoLj2RZ5HA9cQ2N2hBGZ7DXRSjmT:MtRQQSa5hgvE6EV2R0c+Gy

Score
7/10
persistence

Malware Config

Targets

    • Target

      28080aa236569b921c1ec036ed9f049d_JaffaCakes118

    • Size

      378KB

    • MD5

      28080aa236569b921c1ec036ed9f049d

    • SHA1

      c0b660f83f5788779f5799ecd85472ff9bfcc628

    • SHA256

      1c33333466c358ad08e26d018a5d9a7bf6b79cdbd12791861bc706d319a68181

    • SHA512

      5df192abf20f92d990794f7fa43b4d683f20a5acdc97dfc3ca0be5af825558607b39dfbd0634bfd4d7b205d06f009a75a3dcd96718b4c13368a90e269b3c1be0

    • SSDEEP

      6144:MtRBp2XCaQSYllfv5oSIrmg8VSPrE00FrkEnGoLj2RZ5HA9cQ2N2hBGZ7DXRSjmT:MtRQQSa5hgvE6EV2R0c+Gy

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks