Overview

overview

7

Static

static

3

d64dedce2f...18.exe

windows7-x64

6

d64dedce2f...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d64dedce2f9ce71a0c5d5c234fb943d4_JaffaCakes118

  • Size

    68KB

  • Sample

    240909-pkp6taxdrn

  • MD5

    d64dedce2f9ce71a0c5d5c234fb943d4

  • SHA1

    624df9c273d26d348d18da16791530d1229e58a6

  • SHA256

    28cc656312bcd6d8e07969007caeb7a550e8e40ae8c0dfe20609f5d04301cfb0

  • SHA512

    24cfde2403c7119123d6f6aac32c0d898beb4f5eaa7164815335823eae738d2fb67a9e115e9da90ca2df8020331c8b584ab6227dcd8a1bde29f99ce40b38dd89

  • SSDEEP

    384:ojQTC55+M7eSqtIWA4rL8pWqAR+suhNryatM3o3L/poWo:1TCH+M7extIWACLDqARGTmm

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      d64dedce2f9ce71a0c5d5c234fb943d4_JaffaCakes118

    • Size

      68KB

    • MD5

      d64dedce2f9ce71a0c5d5c234fb943d4

    • SHA1

      624df9c273d26d348d18da16791530d1229e58a6

    • SHA256

      28cc656312bcd6d8e07969007caeb7a550e8e40ae8c0dfe20609f5d04301cfb0

    • SHA512

      24cfde2403c7119123d6f6aac32c0d898beb4f5eaa7164815335823eae738d2fb67a9e115e9da90ca2df8020331c8b584ab6227dcd8a1bde29f99ce40b38dd89

    • SSDEEP

      384:ojQTC55+M7eSqtIWA4rL8pWqAR+suhNryatM3o3L/poWo:1TCH+M7extIWACLDqARGTmm

    Score
    7/10
    discoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks