6e4def7a7d6bec715e979fb6acd992e491a285ae7e6aabe1292773e400e6983b | Triage™

Login
Reports

Overview

overview

8

Static

static

1

c0ac31b696...18.exe

windows7-x64

8

c0ac31b696...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

Target
c0ac31b6962e53d6df68f90f97643c0b_JaffaCakes118
Size 733KB
Sample240825-nwct7asenc
SHA256 6e4def7a7d6bec715e979fb6acd992e491a285ae7e6aabe1292773e400e6983b
MD5 c0ac31b6962e53d6df68f90f97643c0b
SHA1 f8a8fd3f91f471dc6d98efaa5ca67ef998efc401
SHA512 0df332ca388218ed23cb4edaf2c91da04c5f782e9bd2cd2e0ef12ff7e55e2bcc495e89a1616ed7da5d495597392e7a8b33c193801ddc5efe33863ee2e9943a70
SSDEEP 12288:13Fpj4rBRLukn+zKg2oOR2OQl5g0AdmxQDgGeItGBV07XpWZhASRXHYnrmH:1VpUFRUgoOwOY5g0AqQlFtWVAqRXHYr0
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

discovery evasion persistence privilege_escalation

Static task

static1

Behavioral task

behavioral1

Sample

c0ac31b6962e53d6df68f90f97643c0b_JaffaCakes118.exe

Resource

win7-20240708-en

windows7-x64

5 signatures

150 seconds

discovery evasion persistence privilege_escalation

Behavioral task

behavioral2

Sample

c0ac31b6962e53d6df68f90f97643c0b_JaffaCakes118.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

6 signatures

150 seconds

discovery evasion persistence privilege_escalation

Malware Config

Targets

- Target
  c0ac31b6962e53d6df68f90f97643c0b_JaffaCakes118
- Size 733KB
- SHA256 6e4def7a7d6bec715e979fb6acd992e491a285ae7e6aabe1292773e400e6983b
- MD5 c0ac31b6962e53d6df68f90f97643c0b
- SHA1 f8a8fd3f91f471dc6d98efaa5ca67ef998efc401
- SHA512 0df332ca388218ed23cb4edaf2c91da04c5f782e9bd2cd2e0ef12ff7e55e2bcc495e89a1616ed7da5d495597392e7a8b33c193801ddc5efe33863ee2e9943a70
- SSDEEP 12288:13Fpj4rBRLukn+zKg2oOR2OQl5g0AdmxQDgGeItGBV07XpWZhASRXHYnrmH:1VpUFRUgoOwOY5g0AqQlFtWVAqRXHYr0
- MD5 SHA1 SHA512 SSDEEP
Score

8^/10

discovery evasion persistence privilege_escalation
- Modifies Windows Firewall
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Create or Modify System Process

Windows Service

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalation

behavioral2

discoveryevasionpersistenceprivilege_escalation

© 2018-2026

Terms | Privacy