Overview

overview

7

Static

static

3

5f2d2cdf37...18.exe

windows7-x64

7

5f2d2cdf37...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5f2d2cdf37767260b91be36d179da558_JaffaCakes118

  • Size

    681KB

  • Sample

    240720-f17lcsxhnk

  • MD5

    5f2d2cdf37767260b91be36d179da558

  • SHA1

    eb27613c41ae8ebc5eeb676744c9b97dfefb6d94

  • SHA256

    d3df3996ee18be7a67baf9e14ded3de62767372fc18df12a9efbb98df8102435

  • SHA512

    02c0e6f50e15ac803e1e4334a27a8c2e00c2578effcc7f69178d78c65d2060726adc40152745fc1d3dbb0123c58477372a183eeb6ecf3707ea9969267ba05ddd

  • SSDEEP

    12288:a9OkrDWvazofhAe+hK8assCtzATVSw90c1kOY:2DdEAe2taNEz050c1G

Score
7/10
persistence

Malware Config

Targets

    • Target

      5f2d2cdf37767260b91be36d179da558_JaffaCakes118

    • Size

      681KB

    • MD5

      5f2d2cdf37767260b91be36d179da558

    • SHA1

      eb27613c41ae8ebc5eeb676744c9b97dfefb6d94

    • SHA256

      d3df3996ee18be7a67baf9e14ded3de62767372fc18df12a9efbb98df8102435

    • SHA512

      02c0e6f50e15ac803e1e4334a27a8c2e00c2578effcc7f69178d78c65d2060726adc40152745fc1d3dbb0123c58477372a183eeb6ecf3707ea9969267ba05ddd

    • SSDEEP

      12288:a9OkrDWvazofhAe+hK8assCtzATVSw90c1kOY:2DdEAe2taNEz050c1G

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks