Overview

overview

8

Static

static

3

65e063695f...18.exe

windows7-x64

8

65e063695f...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    65e063695f2fbd0c9a14d65a1d6365cd_JaffaCakes118

  • Size

    32KB

  • Sample

    240723-dgbngatene

  • MD5

    65e063695f2fbd0c9a14d65a1d6365cd

  • SHA1

    1e210ac77f7cdddbc4788b345f56d3df13eaa800

  • SHA256

    f6feba72643d64d429dbdf8d5e8f368037a9d49c9466cb9ce1ea6a1f956855a0

  • SHA512

    efdb727e91fea2abdfa2ee5ace70ccec7cd271afbce9581d00a44cd65eb03af58fad1831cd25331bf421011c5db768285649ada2c55f54ec54bf0cb67733b396

  • SSDEEP

    768:MC1TK42IMra7iEsNeG0xXDMXQPerqhjiZB9B7csgZu6uY:HKC2iiEBXxzMXQPwqxiZBf7GZLH

Score
8/10
persistence

Malware Config

Targets

    • Target

      65e063695f2fbd0c9a14d65a1d6365cd_JaffaCakes118

    • Size

      32KB

    • MD5

      65e063695f2fbd0c9a14d65a1d6365cd

    • SHA1

      1e210ac77f7cdddbc4788b345f56d3df13eaa800

    • SHA256

      f6feba72643d64d429dbdf8d5e8f368037a9d49c9466cb9ce1ea6a1f956855a0

    • SHA512

      efdb727e91fea2abdfa2ee5ace70ccec7cd271afbce9581d00a44cd65eb03af58fad1831cd25331bf421011c5db768285649ada2c55f54ec54bf0cb67733b396

    • SSDEEP

      768:MC1TK42IMra7iEsNeG0xXDMXQPerqhjiZB9B7csgZu6uY:HKC2iiEBXxzMXQPwqxiZBf7GZLH

    Score
    8/10
    persistence

    • Adds policy Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks