Overview

overview

7

Static

static

3

63392ca1f7...18.exe

windows7-x64

7

63392ca1f7...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    63392ca1f784764ddbb4e9435f716281_JaffaCakes118

  • Size

    119KB

  • Sample

    240722-prmn9sydjj

  • MD5

    63392ca1f784764ddbb4e9435f716281

  • SHA1

    e307418c7d8cc4e92ffe940404f5c7cd10a4479c

  • SHA256

    e157f424e315ee7d79218c7f756e9f4c05ee8817bb456fb35778db89e44e6dbb

  • SHA512

    d05187aec6877826ac32331a89190ee62705b03be5d7363856e157cec8d23c0c623a7d169656654297750630bf60ed42ab78c8b1e6608b383639efdb1235c011

  • SSDEEP

    3072:Ei9LGd2q6kfXlSlY5dQ8kkzxva1Clin31o49UUaRyc9:VNO+kfXymPtC1VnluJ

Score
7/10
persistence

Malware Config

Targets

    • Target

      63392ca1f784764ddbb4e9435f716281_JaffaCakes118

    • Size

      119KB

    • MD5

      63392ca1f784764ddbb4e9435f716281

    • SHA1

      e307418c7d8cc4e92ffe940404f5c7cd10a4479c

    • SHA256

      e157f424e315ee7d79218c7f756e9f4c05ee8817bb456fb35778db89e44e6dbb

    • SHA512

      d05187aec6877826ac32331a89190ee62705b03be5d7363856e157cec8d23c0c623a7d169656654297750630bf60ed42ab78c8b1e6608b383639efdb1235c011

    • SSDEEP

      3072:Ei9LGd2q6kfXlSlY5dQ8kkzxva1Clin31o49UUaRyc9:VNO+kfXymPtC1VnluJ

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks