Overview

overview

7

Static

static

1

2fc191768e...18.exe

windows7-x64

7

2fc191768e...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fc191768ec1fcd0c44ad515eba02785_JaffaCakes118

  • Size

    5.1MB

  • Sample

    240709-k2ts4swcnl

  • MD5

    2fc191768ec1fcd0c44ad515eba02785

  • SHA1

    d7fac412a7fcfbdca078ebb1bc766cfea7330bf1

  • SHA256

    bd966425c165a38e0f7d39cb433995a025915e4ed783f72e13dce8179c679f60

  • SHA512

    a4e0f1c124d6180dbf605f5f6933f47701d208b3867d3953863f1647353dcce5aa2c70cc11cafe91084f154be27332f4d55dbf86fa4a55426b84749d3c8c4dc9

  • SSDEEP

    98304:DeMoBWz/XJWOygAqSnA4YDf+ONRXQ+TBMb5ZreQvyYmRshs4p:lWy/XJWOyRqC1cfBNRXQUMb5ZreSyfuN

Score
7/10

Malware Config

Targets

    • Target

      2fc191768ec1fcd0c44ad515eba02785_JaffaCakes118

    • Size

      5.1MB

    • MD5

      2fc191768ec1fcd0c44ad515eba02785

    • SHA1

      d7fac412a7fcfbdca078ebb1bc766cfea7330bf1

    • SHA256

      bd966425c165a38e0f7d39cb433995a025915e4ed783f72e13dce8179c679f60

    • SHA512

      a4e0f1c124d6180dbf605f5f6933f47701d208b3867d3953863f1647353dcce5aa2c70cc11cafe91084f154be27332f4d55dbf86fa4a55426b84749d3c8c4dc9

    • SSDEEP

      98304:DeMoBWz/XJWOygAqSnA4YDf+ONRXQ+TBMb5ZreQvyYmRshs4p:lWy/XJWOyRqC1cfBNRXQUMb5ZreSyfuN

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks