Overview

overview

8

Static

static

3

5e46cd967f...18.dll

windows7-x64

8

5e46cd967f...18.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e46cd967ffe8e51a3323182f2a40e3b_JaffaCakes118

  • Size

    60KB

  • Sample

    240720-ahcqda1cnc

  • MD5

    5e46cd967ffe8e51a3323182f2a40e3b

  • SHA1

    13f7cf2962ff3dc3883c25d3a040e056503f83cc

  • SHA256

    b83e1568ce9d74da7dbfdaf336d4d1bef15a850984e8a5ad7fed5eb27a79da54

  • SHA512

    1d5b6f5b6d0eb3f8852e45df6aaa6c62b09903f96a344577713ab2c6a2ac92bcb6f5b644f720bf24ab77d0181d0a04412886edf4d0bb83a10f90880abaf696e5

  • SSDEEP

    768:FBZX+Nzp4mjNx4Ss4l6iE18++uWdB9GBc81f+Iw5BLJUXNPgH9nmscY:FPdc2inuWdB9r8YXPJY2BmscY

Score
8/10
persistenceprivilege_escalation

Malware Config

Targets

    • Target

      5e46cd967ffe8e51a3323182f2a40e3b_JaffaCakes118

    • Size

      60KB

    • MD5

      5e46cd967ffe8e51a3323182f2a40e3b

    • SHA1

      13f7cf2962ff3dc3883c25d3a040e056503f83cc

    • SHA256

      b83e1568ce9d74da7dbfdaf336d4d1bef15a850984e8a5ad7fed5eb27a79da54

    • SHA512

      1d5b6f5b6d0eb3f8852e45df6aaa6c62b09903f96a344577713ab2c6a2ac92bcb6f5b644f720bf24ab77d0181d0a04412886edf4d0bb83a10f90880abaf696e5

    • SSDEEP

      768:FBZX+Nzp4mjNx4Ss4l6iE18++uWdB9GBc81f+Iw5BLJUXNPgH9nmscY:FPdc2inuWdB9r8YXPJY2BmscY

    Score
    8/10
    persistenceprivilege_escalation

    • Event Triggered Execution: AppInit DLLs

      Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.

      persistenceprivilege_escalation

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks