Overview

overview

7

Static

static

3

5ef85a3a4f...18.exe

windows7-x64

7

5ef85a3a4f...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5ef85a3a4fcbe2da668616ffd8f29c08_JaffaCakes118

  • Size

    11KB

  • Sample

    240720-ep9qxayhlc

  • MD5

    5ef85a3a4fcbe2da668616ffd8f29c08

  • SHA1

    1b6ecc2157539c46d29ef2fbbb6447e47958d686

  • SHA256

    f6a8de1a170c3b0a34bf86bb53bf4f34fb517ded3747a95bb68d84b6b355cf85

  • SHA512

    541cdd0c6a66f1db2cf669b9f6f3f98caeaeb350b57726d4cc4079fcc0007e3a7a3d5ac1f268b72d45505635c65ae4abfd66a7359d05e68e9fdf1b4647b003d7

  • SSDEEP

    192:HZH+V+cXezw7a40RmWYs4JbYTU8j23bxHhhN17IW:p+IcXeU7aMe49YoW2rxHhhHUW

Score
7/10
persistence

Malware Config

Targets

    • Target

      5ef85a3a4fcbe2da668616ffd8f29c08_JaffaCakes118

    • Size

      11KB

    • MD5

      5ef85a3a4fcbe2da668616ffd8f29c08

    • SHA1

      1b6ecc2157539c46d29ef2fbbb6447e47958d686

    • SHA256

      f6a8de1a170c3b0a34bf86bb53bf4f34fb517ded3747a95bb68d84b6b355cf85

    • SHA512

      541cdd0c6a66f1db2cf669b9f6f3f98caeaeb350b57726d4cc4079fcc0007e3a7a3d5ac1f268b72d45505635c65ae4abfd66a7359d05e68e9fdf1b4647b003d7

    • SSDEEP

      192:HZH+V+cXezw7a40RmWYs4JbYTU8j23bxHhhN17IW:p+IcXeU7aMe49YoW2rxHhhHUW

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks