Overview

overview

7

Static

static

3

8578c8f530...18.exe

windows7-x64

7

8578c8f530...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8578c8f530580e7756f8d2b1ec079516_JaffaCakes118

  • Size

    2.7MB

  • Sample

    240810-kp4sjssfrk

  • MD5

    8578c8f530580e7756f8d2b1ec079516

  • SHA1

    59327e9eb8a8ebefbd0bd25ce87ad2f1e8345885

  • SHA256

    557d3e14ed8f4848b2caf8308d805c91ad9b4e292039115ff563053a7cb5034a

  • SHA512

    12e8d62f1963f8cc526153eb3bc738164b4b97ab3b475378ec9623487715256cd36582f64c474d3e13c8b1bde96303332b701e9c0240d928fbbc1dc7b7818d76

  • SSDEEP

    3072:HhLjHc2K0v64YbAuRKA2FFRNrusteq3J84MRRShldMJxuR2MZmbxPYfD:BLjHXK0y4MuAUDx9teQ9WRM+HMkJ

Score
7/10
persistence

Malware Config

Targets

    • Target

      8578c8f530580e7756f8d2b1ec079516_JaffaCakes118

    • Size

      2.7MB

    • MD5

      8578c8f530580e7756f8d2b1ec079516

    • SHA1

      59327e9eb8a8ebefbd0bd25ce87ad2f1e8345885

    • SHA256

      557d3e14ed8f4848b2caf8308d805c91ad9b4e292039115ff563053a7cb5034a

    • SHA512

      12e8d62f1963f8cc526153eb3bc738164b4b97ab3b475378ec9623487715256cd36582f64c474d3e13c8b1bde96303332b701e9c0240d928fbbc1dc7b7818d76

    • SSDEEP

      3072:HhLjHc2K0v64YbAuRKA2FFRNrusteq3J84MRRShldMJxuR2MZmbxPYfD:BLjHXK0y4MuAUDx9teQ9WRM+HMkJ

    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks