Overview

overview

8

Static

static

3

4aabf80b8a...18.exe

windows7-x64

8

4aabf80b8a...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4aabf80b8a7a51cfb79f03e2da828a22_JaffaCakes118

  • Size

    118KB

  • Sample

    240715-v1fvzatgjb

  • MD5

    4aabf80b8a7a51cfb79f03e2da828a22

  • SHA1

    152e566dfb2b495c47da1899c03d8d3f5b2fee75

  • SHA256

    46321ee5645d40da5dad1bd26c5891c1f35aeba30fb70d7696a827ed5c9385e7

  • SHA512

    a7cc4c8b85052485073a8b1cf2576c975774d1089c44d132e7d52ab5f9c0acdaa2c2945d63e12c0843285dd5a81f62ccbe37769f62796b99227e944044105327

  • SSDEEP

    1536:uJEBzwQV0i/x+zHyl+6PdbxqVnXLbAXmIapP4BsW0AWhlOXYhnl3PoSRA4IQwHOK:aqUQt+Tyl+6Pdb07ylo91QIhl3bpgb

Score
8/10
persistence

Malware Config

Targets

    • Target

      4aabf80b8a7a51cfb79f03e2da828a22_JaffaCakes118

    • Size

      118KB

    • MD5

      4aabf80b8a7a51cfb79f03e2da828a22

    • SHA1

      152e566dfb2b495c47da1899c03d8d3f5b2fee75

    • SHA256

      46321ee5645d40da5dad1bd26c5891c1f35aeba30fb70d7696a827ed5c9385e7

    • SHA512

      a7cc4c8b85052485073a8b1cf2576c975774d1089c44d132e7d52ab5f9c0acdaa2c2945d63e12c0843285dd5a81f62ccbe37769f62796b99227e944044105327

    • SSDEEP

      1536:uJEBzwQV0i/x+zHyl+6PdbxqVnXLbAXmIapP4BsW0AWhlOXYhnl3PoSRA4IQwHOK:aqUQt+Tyl+6Pdb07ylo91QIhl3bpgb

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks