Overview

overview

7

Static

static

3

3e43904e7a...18.exe

windows7-x64

7

3e43904e7a...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e43904e7a2463d918cab263f9d7c129_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240712-v78jkawapg

  • MD5

    3e43904e7a2463d918cab263f9d7c129

  • SHA1

    bce43ab5e5535403475b327c141734eb97233252

  • SHA256

    f2167716d8292af49a4b3fd8510501462d58337ccebec3c78c9087a9ef3612bf

  • SHA512

    e981325aeacd889e45e80c25dfc82b1cadcd1b4a741d5ae407234ec80b6fa16d971540fe883605c1ca57109d0e81978072bd543219ae9ce73ec8c43a78709bf6

  • SSDEEP

    49152:kRaqrZon4TYFyhPhMP1rYRU52DJbWoEop+:kRaq8UPhVXDJbWoLE

Score
7/10
persistence

Malware Config

Targets

    • Target

      3e43904e7a2463d918cab263f9d7c129_JaffaCakes118

    • Size

      1.7MB

    • MD5

      3e43904e7a2463d918cab263f9d7c129

    • SHA1

      bce43ab5e5535403475b327c141734eb97233252

    • SHA256

      f2167716d8292af49a4b3fd8510501462d58337ccebec3c78c9087a9ef3612bf

    • SHA512

      e981325aeacd889e45e80c25dfc82b1cadcd1b4a741d5ae407234ec80b6fa16d971540fe883605c1ca57109d0e81978072bd543219ae9ce73ec8c43a78709bf6

    • SSDEEP

      49152:kRaqrZon4TYFyhPhMP1rYRU52DJbWoEop+:kRaq8UPhVXDJbWoLE

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks