Overview

overview

7

Static

static

3

81cce2a851...18.exe

windows7-x64

7

81cce2a851...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81cce2a851bcc14168b7d91312a9dd90_JaffaCakes118

  • Size

    97KB

  • Sample

    240801-1d2f2s1ejh

  • MD5

    81cce2a851bcc14168b7d91312a9dd90

  • SHA1

    80fb55b9cbb26f5ddc865d265f5c384d44ab6739

  • SHA256

    4e1035a690cba57405aec7087f8c64db6f155b52d8b3d8cec0419457492d5dba

  • SHA512

    dd836d023d8ab0d78f842ef77698d7746e8ad5b547f0d9896f5fe804d3fb2f65cf1040e31e4c27a6abfb488c9c8dbee3ce9a09b43aa4b37ae3998855b88256e2

  • SSDEEP

    1536:LomRneKYpTuoqFnMyoBHmXE5gxRdd/1PqSOX/U/YNxb2Z9IPPisafhw:L/eLpKoEn0VL5qZP+aYPXww

Score
7/10
discovery

Malware Config

Targets

    • Target

      81cce2a851bcc14168b7d91312a9dd90_JaffaCakes118

    • Size

      97KB

    • MD5

      81cce2a851bcc14168b7d91312a9dd90

    • SHA1

      80fb55b9cbb26f5ddc865d265f5c384d44ab6739

    • SHA256

      4e1035a690cba57405aec7087f8c64db6f155b52d8b3d8cec0419457492d5dba

    • SHA512

      dd836d023d8ab0d78f842ef77698d7746e8ad5b547f0d9896f5fe804d3fb2f65cf1040e31e4c27a6abfb488c9c8dbee3ce9a09b43aa4b37ae3998855b88256e2

    • SSDEEP

      1536:LomRneKYpTuoqFnMyoBHmXE5gxRdd/1PqSOX/U/YNxb2Z9IPPisafhw:L/eLpKoEn0VL5qZP+aYPXww

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks