Overview

overview

8

Static

static

3

5acef71913...18.exe

windows7-x64

8

5acef71913...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5acef71913386b1797fac9c2a20b1586_JaffaCakes118

  • Size

    68KB

  • Sample

    240719-g7f8eswhkl

  • MD5

    5acef71913386b1797fac9c2a20b1586

  • SHA1

    ddee4ecd39971b4336e7689659c60230e2f58991

  • SHA256

    b64e5578b24096c6592ee7fbba2661af69397d10fd65317a2cdd1e59fce39235

  • SHA512

    8efba606622a297646f83219b186976a82e4c06a5de2ed455d28576dfa0ae04bcdee11a60027abf546fb4f622ec6d6a7302553116f26dcc914c9852f49fe09d7

  • SSDEEP

    1536:dtq94r/A7amvIThkLZsRwYSpRPMwPgAa8n/6OVFrTP6m:FTwIu1sqzVPJNn/6O/f

Score
8/10
persistence

Malware Config

Targets

    • Target

      5acef71913386b1797fac9c2a20b1586_JaffaCakes118

    • Size

      68KB

    • MD5

      5acef71913386b1797fac9c2a20b1586

    • SHA1

      ddee4ecd39971b4336e7689659c60230e2f58991

    • SHA256

      b64e5578b24096c6592ee7fbba2661af69397d10fd65317a2cdd1e59fce39235

    • SHA512

      8efba606622a297646f83219b186976a82e4c06a5de2ed455d28576dfa0ae04bcdee11a60027abf546fb4f622ec6d6a7302553116f26dcc914c9852f49fe09d7

    • SSDEEP

      1536:dtq94r/A7amvIThkLZsRwYSpRPMwPgAa8n/6OVFrTP6m:FTwIu1sqzVPJNn/6O/f

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks