Overview

overview

8

Static

static

3

450ec87c26...18.exe

windows7-x64

8

450ec87c26...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    450ec87c26ca2592738a075f9872955a_JaffaCakes118

  • Size

    30KB

  • Sample

    240714-kfvtaawbmd

  • MD5

    450ec87c26ca2592738a075f9872955a

  • SHA1

    f08d9db7afee3ce7047cf2456a0cf1810d220382

  • SHA256

    d30888d4689507a3aa75b86f2385002322cd408455b6f2e0d0e8bd2952134e12

  • SHA512

    3a7408574236179f54c8d34798618d8217e401290f8bf5eced97b10862d141fe14c61d3a00decac2121ed2e12ec3b29b21b4868e2321ef5f78410bd6fa6f1a58

  • SSDEEP

    384:RE5VkN1cP1c0O5bhed4WGxs3myUcA3r+QIFOy8nEjH/wEkXU1fHSi77FY+0UoAQH:AptY3HsDULmwEkafPFYmB2XLL8rbHpNY

Score
8/10
persistence

Malware Config

Targets

    • Target

      450ec87c26ca2592738a075f9872955a_JaffaCakes118

    • Size

      30KB

    • MD5

      450ec87c26ca2592738a075f9872955a

    • SHA1

      f08d9db7afee3ce7047cf2456a0cf1810d220382

    • SHA256

      d30888d4689507a3aa75b86f2385002322cd408455b6f2e0d0e8bd2952134e12

    • SHA512

      3a7408574236179f54c8d34798618d8217e401290f8bf5eced97b10862d141fe14c61d3a00decac2121ed2e12ec3b29b21b4868e2321ef5f78410bd6fa6f1a58

    • SSDEEP

      384:RE5VkN1cP1c0O5bhed4WGxs3myUcA3r+QIFOy8nEjH/wEkXU1fHSi77FY+0UoAQH:AptY3HsDULmwEkafPFYmB2XLL8rbHpNY

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks