Overview

overview

8

Static

static

3

f67146391e...18.exe

windows7-x64

8

f67146391e...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f67146391e8516d61da4e8ce091ab2df_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240925-vb5g2azakc

  • MD5

    f67146391e8516d61da4e8ce091ab2df

  • SHA1

    14e82da3dbb44ac4a7f9adf38aedaebe2dc3fca4

  • SHA256

    589135f2404a7300a09fc9ee56f5109699c75a5fc925cf5e78aa00e1a0254e2e

  • SHA512

    30a21f0a04f84862f14dc8c558e3ed89e69941d5ae124bd6ac2ed4a32b85fdb185ba982b036dfb44f976ccb2bcb02962b9ee9a1d833fe58d7195e4922cf12ff9

  • SSDEEP

    12288:8kQ4PIcBqHybSce3dhPq5nd+qsT1Z7LrA2LkQ4PIcBqHybSce3dhPq5nd+qsT1Z3:85QIzHyuhiDyrPL5QIzHyuhiDyrPAcT

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      f67146391e8516d61da4e8ce091ab2df_JaffaCakes118

    • Size

      1.3MB

    • MD5

      f67146391e8516d61da4e8ce091ab2df

    • SHA1

      14e82da3dbb44ac4a7f9adf38aedaebe2dc3fca4

    • SHA256

      589135f2404a7300a09fc9ee56f5109699c75a5fc925cf5e78aa00e1a0254e2e

    • SHA512

      30a21f0a04f84862f14dc8c558e3ed89e69941d5ae124bd6ac2ed4a32b85fdb185ba982b036dfb44f976ccb2bcb02962b9ee9a1d833fe58d7195e4922cf12ff9

    • SSDEEP

      12288:8kQ4PIcBqHybSce3dhPq5nd+qsT1Z7LrA2LkQ4PIcBqHybSce3dhPq5nd+qsT1Z3:85QIzHyuhiDyrPL5QIzHyuhiDyrPAcT

    Score
    8/10
    discoverypersistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks