Overview

overview

7

Static

static

3

b38b434a32...18.exe

windows7-x64

7

b38b434a32...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b38b434a32ef25b5c5cde70bef6a3be5_JaffaCakes118

  • Size

    1.8MB

  • Sample

    240821-p7rcdszbmc

  • MD5

    b38b434a32ef25b5c5cde70bef6a3be5

  • SHA1

    bf15f1585e8676fbfd3acd972ab522a8630311dc

  • SHA256

    3eeac00ea7f4165bcc97bfd2423980861587672def9679029b803e252aa65c4d

  • SHA512

    a6d9230b5de597034f6aac96dc1d0d2f9bbd03c7849306a2077e959528f8bd91df9703ce9156944fec38f4abf778676df694f60484a1db978027578b14146b1f

  • SSDEEP

    49152:dpToKhpUcKpn8xO9d021MYqD9BP/n3NHj:UKjUcKJBK21MZDXP/n9D

Score
7/10
discovery

Malware Config

Targets

    • Target

      b38b434a32ef25b5c5cde70bef6a3be5_JaffaCakes118

    • Size

      1.8MB

    • MD5

      b38b434a32ef25b5c5cde70bef6a3be5

    • SHA1

      bf15f1585e8676fbfd3acd972ab522a8630311dc

    • SHA256

      3eeac00ea7f4165bcc97bfd2423980861587672def9679029b803e252aa65c4d

    • SHA512

      a6d9230b5de597034f6aac96dc1d0d2f9bbd03c7849306a2077e959528f8bd91df9703ce9156944fec38f4abf778676df694f60484a1db978027578b14146b1f

    • SSDEEP

      49152:dpToKhpUcKpn8xO9d021MYqD9BP/n3NHj:UKjUcKJBK21MZDXP/n9D

    Score
    7/10
    discovery

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks