Overview

overview

8

Static

static

3

2b0acfe389...18.dll

windows7-x64

8

2b0acfe389...18.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2b0acfe389d02c55a76fd36fd856f7ec_JaffaCakes118

  • Size

    133KB

  • Sample

    240708-fgx8ksshqr

  • MD5

    2b0acfe389d02c55a76fd36fd856f7ec

  • SHA1

    3c50c9a7215e3e4aef783f88f47ad52c29f7f9f6

  • SHA256

    14686152ffbba27946876f437dee0ec81d1500e1f5ed86741381c11d3a82952e

  • SHA512

    3da72cf6240490dc4c0e674089e7d93df96734eee3f89025c6d599147309da2ec6ac913de3129f82de0591c4d07fe6a28e8332d590d6899a498a766833114c1d

  • SSDEEP

    3072:WAbjlJMox6JJmZJffZznZ0S0T92K/rSjcDLg715wyu6HOL5PFn0wcccccccc:N3b9x6XmTf0S0T92K/2j/7gmH0PFn0wX

Score
8/10
persistence

Malware Config

Targets

    • Target

      2b0acfe389d02c55a76fd36fd856f7ec_JaffaCakes118

    • Size

      133KB

    • MD5

      2b0acfe389d02c55a76fd36fd856f7ec

    • SHA1

      3c50c9a7215e3e4aef783f88f47ad52c29f7f9f6

    • SHA256

      14686152ffbba27946876f437dee0ec81d1500e1f5ed86741381c11d3a82952e

    • SHA512

      3da72cf6240490dc4c0e674089e7d93df96734eee3f89025c6d599147309da2ec6ac913de3129f82de0591c4d07fe6a28e8332d590d6899a498a766833114c1d

    • SSDEEP

      3072:WAbjlJMox6JJmZJffZznZ0S0T92K/rSjcDLg715wyu6HOL5PFn0wcccccccc:N3b9x6XmTf0S0T92K/2j/7gmH0PFn0wX

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks