Overview

overview

7

Static

static

7

6f24a667a7...18.exe

windows7-x64

7

6f24a667a7...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f24a667a7ffab78b44d383b77207a43_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240725-l6p66avhla

  • MD5

    6f24a667a7ffab78b44d383b77207a43

  • SHA1

    85a3f4d3c087f8bf6e54d9476925868c350d3278

  • SHA256

    195e7b0c95387714c2a1c1c7add9f359499c592e4f8ed599b5de341053761927

  • SHA512

    0164a596c802dfa1c987123a51548b2530c7ab2ad19821ea0577d742e545b63b481095941dfd3638299ef8426b92eefc52fd2a12af41619c49f43a23344746c2

  • SSDEEP

    24576:cZ4R1mPShMIqtu/ZfPb5Qel3IYsrPq05HGlRq+ZNn5V4cNON6qnVKAoyzIcXoo:cKxbnl3glH6PXcZVNo6IFo

Score
7/10

Malware Config

Targets

    • Target

      6f24a667a7ffab78b44d383b77207a43_JaffaCakes118

    • Size

      1.3MB

    • MD5

      6f24a667a7ffab78b44d383b77207a43

    • SHA1

      85a3f4d3c087f8bf6e54d9476925868c350d3278

    • SHA256

      195e7b0c95387714c2a1c1c7add9f359499c592e4f8ed599b5de341053761927

    • SHA512

      0164a596c802dfa1c987123a51548b2530c7ab2ad19821ea0577d742e545b63b481095941dfd3638299ef8426b92eefc52fd2a12af41619c49f43a23344746c2

    • SSDEEP

      24576:cZ4R1mPShMIqtu/ZfPb5Qel3IYsrPq05HGlRq+ZNn5V4cNON6qnVKAoyzIcXoo:cKxbnl3glH6PXcZVNo6IFo

    Score
    7/10

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks