Overview

overview

8

Static

static

3

342dff26ac...18.exe

windows7-x64

8

342dff26ac...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    342dff26ac55db2567dec55dd0dce4a0_JaffaCakes118

  • Size

    435KB

  • Sample

    240710-llgpaascpg

  • MD5

    342dff26ac55db2567dec55dd0dce4a0

  • SHA1

    9f8c3aff3faea1d785b4515e98f9e217f0375b58

  • SHA256

    4ee0463a1369b97f29ba4a65d1dff0a4f804c551ad768fae916051b821dae9fb

  • SHA512

    0dfd8723d5eced38f44cd8a88a7dc866c80b3f440f3c7d60ee1ca092f77bae12069e496e7776e023331802b02a9794898482ba4c676e75871516908b198bc54b

  • SSDEEP

    12288:JLgI37qsC/rHyq6ADx09nJenVjP1/y9TTl5D7RIF5TQwRh6:Jb37qsC/jyq6c3mTl5Dmgw

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      342dff26ac55db2567dec55dd0dce4a0_JaffaCakes118

    • Size

      435KB

    • MD5

      342dff26ac55db2567dec55dd0dce4a0

    • SHA1

      9f8c3aff3faea1d785b4515e98f9e217f0375b58

    • SHA256

      4ee0463a1369b97f29ba4a65d1dff0a4f804c551ad768fae916051b821dae9fb

    • SHA512

      0dfd8723d5eced38f44cd8a88a7dc866c80b3f440f3c7d60ee1ca092f77bae12069e496e7776e023331802b02a9794898482ba4c676e75871516908b198bc54b

    • SSDEEP

      12288:JLgI37qsC/rHyq6ADx09nJenVjP1/y9TTl5D7RIF5TQwRh6:Jb37qsC/jyq6c3mTl5Dmgw

    Score
    8/10
    evasionpersistence

    • Disables Task Manager via registry modification

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks