Overview

overview

7

Static

static

3

eac71bd8a9...18.exe

windows7-x64

7

eac71bd8a9...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eac71bd8a9882bd0ae43ec6027c2d868_JaffaCakes118

  • Size

    197KB

  • Sample

    240919-hfp7pavhjc

  • MD5

    eac71bd8a9882bd0ae43ec6027c2d868

  • SHA1

    dd0aa28fbdde656b0122e083f1c595ebcb6ac44c

  • SHA256

    10627f77dfa2929255b7b58c7a33fc9bdfc573fc965a4d437f97a6c12cd8efed

  • SHA512

    e774b66f6df5c64ac5b63f9e50ebd40407311e5c60acea06cd99926ca23cbc73b261ed934c65e157dc71fabedde04a2d65782d582aea2da6fa7423329407d568

  • SSDEEP

    3072:AoZhrQNR9OtTBfAex78fZjk1Qi6T+mPw76dZWouCI4BAl3Q2qdd5VJSz:HrQT9OtTBoy7ujmQdnk6s/4el3Q2qzMz

Score
7/10
discovery

Malware Config

Targets

    • Target

      eac71bd8a9882bd0ae43ec6027c2d868_JaffaCakes118

    • Size

      197KB

    • MD5

      eac71bd8a9882bd0ae43ec6027c2d868

    • SHA1

      dd0aa28fbdde656b0122e083f1c595ebcb6ac44c

    • SHA256

      10627f77dfa2929255b7b58c7a33fc9bdfc573fc965a4d437f97a6c12cd8efed

    • SHA512

      e774b66f6df5c64ac5b63f9e50ebd40407311e5c60acea06cd99926ca23cbc73b261ed934c65e157dc71fabedde04a2d65782d582aea2da6fa7423329407d568

    • SSDEEP

      3072:AoZhrQNR9OtTBfAex78fZjk1Qi6T+mPw76dZWouCI4BAl3Q2qdd5VJSz:HrQT9OtTBoy7ujmQdnk6s/4el3Q2qzMz

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks