Overview

overview

7

Static

static

3

5a2d7579a9...18.exe

windows7-x64

7

5a2d7579a9...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a2d7579a907654c1a5723e88ce44367_JaffaCakes118

  • Size

    40KB

  • Sample

    240719-dcqltszakj

  • MD5

    5a2d7579a907654c1a5723e88ce44367

  • SHA1

    04ee67f04928b04c1b388bfd942a7084cbf2aa75

  • SHA256

    b955d04ad1d73397f6e5b749fd719c30384b1d4e4a0d9a2a69aee8957ddb9815

  • SHA512

    df042d17acc6143c143911f2593c4ade73d9b6f913f0229d22e9d4618a32947b5f75669b804ade56d36d1ecc704147f37f40ac8b94257a46e26bd3a5bb1606c4

  • SSDEEP

    384:bDcNODcZoGcMqrRjPflO82NEK8628sy81ZlXwztYf3D9S9:XQODyohMq1jQ3vms6Ts9

Score
7/10
persistence

Malware Config

Targets

    • Target

      5a2d7579a907654c1a5723e88ce44367_JaffaCakes118

    • Size

      40KB

    • MD5

      5a2d7579a907654c1a5723e88ce44367

    • SHA1

      04ee67f04928b04c1b388bfd942a7084cbf2aa75

    • SHA256

      b955d04ad1d73397f6e5b749fd719c30384b1d4e4a0d9a2a69aee8957ddb9815

    • SHA512

      df042d17acc6143c143911f2593c4ade73d9b6f913f0229d22e9d4618a32947b5f75669b804ade56d36d1ecc704147f37f40ac8b94257a46e26bd3a5bb1606c4

    • SSDEEP

      384:bDcNODcZoGcMqrRjPflO82NEK8628sy81ZlXwztYf3D9S9:XQODyohMq1jQ3vms6Ts9

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks