Overview

overview

7

Static

static

3

712a8afdeb...18.exe

windows7-x64

7

712a8afdeb...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    712a8afdebdb8f037b0ae94addc276f1_JaffaCakes118

  • Size

    792KB

  • Sample

    240725-zjl3watdkr

  • MD5

    712a8afdebdb8f037b0ae94addc276f1

  • SHA1

    da1e46ab3acf67c49ac345219658936bc7c53843

  • SHA256

    29978b2922cf0cfcc42710b405fed6c47be42d1a83f8c88709106389b418dc9c

  • SHA512

    24719da0935ba650d12cdacf4fb6eb8156a418529db92de81072369d0b7c5e4e253d45ff813e719ca67ddedf79da34a15f72d68db235cff648afd97b39f54517

  • SSDEEP

    12288:HqGUp0rOadbmbTEI188yQNfSpyDpR8sYF9IgTVTrj4xYDWWm6:HLSaMLBy0fSp8Qs3OrLDWR

Score
7/10
discovery

Malware Config

Targets

    • Target

      712a8afdebdb8f037b0ae94addc276f1_JaffaCakes118

    • Size

      792KB

    • MD5

      712a8afdebdb8f037b0ae94addc276f1

    • SHA1

      da1e46ab3acf67c49ac345219658936bc7c53843

    • SHA256

      29978b2922cf0cfcc42710b405fed6c47be42d1a83f8c88709106389b418dc9c

    • SHA512

      24719da0935ba650d12cdacf4fb6eb8156a418529db92de81072369d0b7c5e4e253d45ff813e719ca67ddedf79da34a15f72d68db235cff648afd97b39f54517

    • SSDEEP

      12288:HqGUp0rOadbmbTEI188yQNfSpyDpR8sYF9IgTVTrj4xYDWWm6:HLSaMLBy0fSp8Qs3OrLDWR

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks