Overview

overview

7

Static

static

3

d717542858...18.exe

windows7-x64

7

d717542858...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d7175428588d1bbc7bb95f9860951445_JaffaCakes118

  • Size

    317KB

  • Sample

    240909-zxfg9asbra

  • MD5

    d7175428588d1bbc7bb95f9860951445

  • SHA1

    40eb8f7dfa493828b8781746f542deb5b3a2fa0c

  • SHA256

    75d29a195dcd2809dad169a8189d64f088657cdcc433b6257437fb59477ddf84

  • SHA512

    735a904715b4c00feff2b7ec3e06c4251db3a5f98aa59d02793faafc310870b87601e2c3c267522b56b6abc6e4479ddfe3ca9c8c761c3130675c6105d487185c

  • SSDEEP

    6144:Lwt/mic3+J2UIrW8SNChPniCPMozp+39u2UD3Iqti5:LwsicOQ3rW8vKxQ24Ymi

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      d7175428588d1bbc7bb95f9860951445_JaffaCakes118

    • Size

      317KB

    • MD5

      d7175428588d1bbc7bb95f9860951445

    • SHA1

      40eb8f7dfa493828b8781746f542deb5b3a2fa0c

    • SHA256

      75d29a195dcd2809dad169a8189d64f088657cdcc433b6257437fb59477ddf84

    • SHA512

      735a904715b4c00feff2b7ec3e06c4251db3a5f98aa59d02793faafc310870b87601e2c3c267522b56b6abc6e4479ddfe3ca9c8c761c3130675c6105d487185c

    • SSDEEP

      6144:Lwt/mic3+J2UIrW8SNChPniCPMozp+39u2UD3Iqti5:LwsicOQ3rW8vKxQ24Ymi

    Score
    7/10
    discoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks