Overview

overview

8

Static

static

3

2e672d4e7a...18.exe

windows7-x64

8

2e672d4e7a...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e672d4e7a0ff5d1f9c5a49dfd828ead_JaffaCakes118

  • Size

    17KB

  • Sample

    240709-az3ccszcmc

  • MD5

    2e672d4e7a0ff5d1f9c5a49dfd828ead

  • SHA1

    ebf910a826426019e05a575f8b44db949130c363

  • SHA256

    907e4ccb319fb2c2b01cf28a9ab3b78723fc71763f9da228c087f7268ef87281

  • SHA512

    896573029393d1bd1f1f8421d535cee9ba68594104c5399b6bcad5cbc3820a805b22c55f7f910761066ddb011687b94a7a502038210153d525ce6c2de28bd837

  • SSDEEP

    384:wFcvLmdDcmZO2Zp+Nye8pqrmub8TyztsDN:w6ydDoKK8o8TyJc

Score
8/10
persistence

Malware Config

Targets

    • Target

      2e672d4e7a0ff5d1f9c5a49dfd828ead_JaffaCakes118

    • Size

      17KB

    • MD5

      2e672d4e7a0ff5d1f9c5a49dfd828ead

    • SHA1

      ebf910a826426019e05a575f8b44db949130c363

    • SHA256

      907e4ccb319fb2c2b01cf28a9ab3b78723fc71763f9da228c087f7268ef87281

    • SHA512

      896573029393d1bd1f1f8421d535cee9ba68594104c5399b6bcad5cbc3820a805b22c55f7f910761066ddb011687b94a7a502038210153d525ce6c2de28bd837

    • SSDEEP

      384:wFcvLmdDcmZO2Zp+Nye8pqrmub8TyztsDN:w6ydDoKK8o8TyJc

    Score
    8/10
    persistence

    • Event Triggered Execution: Image File Execution Options Injection

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks