Overview

overview

7

Static

static

3

30f8402839...18.exe

windows7-x64

7

30f8402839...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    30f840283943d4a8cbc92bdf3ec9d570_JaffaCakes118

  • Size

    110KB

  • Sample

    240709-s5glyssenf

  • MD5

    30f840283943d4a8cbc92bdf3ec9d570

  • SHA1

    2f4c5a134ea48dfe828b22bcdb67147446274557

  • SHA256

    8f949646b4f80b93ed6eca6eb0973b2396178b49fcb73a6b1c5ded992d7bf2a2

  • SHA512

    1a2b3773f9ca3705062491358724ea1fd165fda55451207a3f33462818591cc32ee4a3a044e3ddf0847703e594f810475b635fc98f68533fdcab46ce97a4b121

  • SSDEEP

    1536:trqS7XV10GB+u07wYbbbbbbM9bbbbbbbbbbbbbbbbbbbbbbbbbnlBKnD/PbLbbbt:t2S7FALkhZkJrii63FnsxlJHlviZw

Score
7/10
persistence

Malware Config

Targets

    • Target

      30f840283943d4a8cbc92bdf3ec9d570_JaffaCakes118

    • Size

      110KB

    • MD5

      30f840283943d4a8cbc92bdf3ec9d570

    • SHA1

      2f4c5a134ea48dfe828b22bcdb67147446274557

    • SHA256

      8f949646b4f80b93ed6eca6eb0973b2396178b49fcb73a6b1c5ded992d7bf2a2

    • SHA512

      1a2b3773f9ca3705062491358724ea1fd165fda55451207a3f33462818591cc32ee4a3a044e3ddf0847703e594f810475b635fc98f68533fdcab46ce97a4b121

    • SSDEEP

      1536:trqS7XV10GB+u07wYbbbbbbM9bbbbbbbbbbbbbbbbbbbbbbbbbnlBKnD/PbLbbbt:t2S7FALkhZkJrii63FnsxlJHlviZw

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks