Overview

overview

8

Static

static

3

34b37059b3...18.exe

windows7-x64

8

34b37059b3...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34b37059b3d8a00537af90ca79069180_JaffaCakes118

  • Size

    1.0MB

  • Sample

    240710-pknmzszbrc

  • MD5

    34b37059b3d8a00537af90ca79069180

  • SHA1

    647900aaeca21c1f7dde1224990956a50b2b0bf1

  • SHA256

    0236f70fede52704fabbfd6ffb6f1deefc2730a55177522c2426ce316be12511

  • SHA512

    42bd2ea085df5ac737a96c55aaa6df23277220c112cb2cbee3ea5901f187a6e8274a732b7120595bf1c2c06202da6c60cc080b0555e341a674763e916c83328f

  • SSDEEP

    24576:QmVrAj+sXFC1ab4DF+KKqgBjE6JhHctb/ap1gaxwxR15qs:Q2q+51O4DF+KU26LHctzapr+5j

Score
8/10
persistence

Malware Config

Targets

    • Target

      34b37059b3d8a00537af90ca79069180_JaffaCakes118

    • Size

      1.0MB

    • MD5

      34b37059b3d8a00537af90ca79069180

    • SHA1

      647900aaeca21c1f7dde1224990956a50b2b0bf1

    • SHA256

      0236f70fede52704fabbfd6ffb6f1deefc2730a55177522c2426ce316be12511

    • SHA512

      42bd2ea085df5ac737a96c55aaa6df23277220c112cb2cbee3ea5901f187a6e8274a732b7120595bf1c2c06202da6c60cc080b0555e341a674763e916c83328f

    • SSDEEP

      24576:QmVrAj+sXFC1ab4DF+KKqgBjE6JhHctb/ap1gaxwxR15qs:Q2q+51O4DF+KU26LHctzapr+5j

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks