Overview

overview

7

Static

static

3

3450551f67...18.exe

windows7-x64

7

3450551f67...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3450551f6743af819aea5d0b65835135_JaffaCakes118

  • Size

    150KB

  • Sample

    240710-mbgrzasamj

  • MD5

    3450551f6743af819aea5d0b65835135

  • SHA1

    eb1023d6b920c83cd9c067b76aedaadccf43a35f

  • SHA256

    93738f1957019b979cddbb3dbc35b52f303b2e35985e2f1915c825d76d4af4c1

  • SHA512

    1ab780801e2c27a4a930897a8b90b1235d3c3c904dcd0dfd6cdf4f4a9c4a63e792104c89d68089af8d2de49f578281ca18d2a19d7780807bc6b6dbeeb82ebed1

  • SSDEEP

    3072:oM84S+aM5tWb7Zgn6r5xuCiu/EqZPiXvgpRghuSXuAwyP:jS+aM5kfZBxuPu/EqZPUvgUhuSl

Score
7/10
persistence

Malware Config

Targets

    • Target

      3450551f6743af819aea5d0b65835135_JaffaCakes118

    • Size

      150KB

    • MD5

      3450551f6743af819aea5d0b65835135

    • SHA1

      eb1023d6b920c83cd9c067b76aedaadccf43a35f

    • SHA256

      93738f1957019b979cddbb3dbc35b52f303b2e35985e2f1915c825d76d4af4c1

    • SHA512

      1ab780801e2c27a4a930897a8b90b1235d3c3c904dcd0dfd6cdf4f4a9c4a63e792104c89d68089af8d2de49f578281ca18d2a19d7780807bc6b6dbeeb82ebed1

    • SSDEEP

      3072:oM84S+aM5tWb7Zgn6r5xuCiu/EqZPiXvgpRghuSXuAwyP:jS+aM5kfZBxuPu/EqZPUvgUhuSl

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks