Overview

overview

7

Static

static

3

5b429a682e...18.exe

windows7-x64

7

5b429a682e...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5b429a682e55448b9961a31a5ed4510e_JaffaCakes118

  • Size

    116KB

  • Sample

    240719-kxnfjasfln

  • MD5

    5b429a682e55448b9961a31a5ed4510e

  • SHA1

    a6a0b99076f926b17ab2701401c91d9ebb6255f6

  • SHA256

    aa67bc3d0bdc1af952dd488ba577439cda7dae186910a8d990bc954ba62660ff

  • SHA512

    86da71f17004570f3445dbc9f3a58c6bd9623c6ea055eba1abcf4ef1e40ec3266a7a80fb6204fc0ca71d42041cc6bfdcb869b1fcf4c77bd62a3d7286c0d7302e

  • SSDEEP

    3072:mu20regsmmworCgrKFKNhHtcHaSFcIArCvxl:DJvorCgQKLHtcHaSFcIArCv

Score
7/10
persistence

Malware Config

Targets

    • Target

      5b429a682e55448b9961a31a5ed4510e_JaffaCakes118

    • Size

      116KB

    • MD5

      5b429a682e55448b9961a31a5ed4510e

    • SHA1

      a6a0b99076f926b17ab2701401c91d9ebb6255f6

    • SHA256

      aa67bc3d0bdc1af952dd488ba577439cda7dae186910a8d990bc954ba62660ff

    • SHA512

      86da71f17004570f3445dbc9f3a58c6bd9623c6ea055eba1abcf4ef1e40ec3266a7a80fb6204fc0ca71d42041cc6bfdcb869b1fcf4c77bd62a3d7286c0d7302e

    • SSDEEP

      3072:mu20regsmmworCgrKFKNhHtcHaSFcIArCvxl:DJvorCgQKLHtcHaSFcIArCv

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks