Overview

overview

7

Static

static

3

fa54cbcd70...18.exe

windows7-x64

7

fa54cbcd70...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa54cbcd707f89f87ec319865a0d0331_JaffaCakes118

  • Size

    27KB

  • Sample

    240927-nqasmsshph

  • MD5

    fa54cbcd707f89f87ec319865a0d0331

  • SHA1

    d4c80761bab1a591830a352997692e18bdc4aab9

  • SHA256

    646897698a86531cd5f82597d10995bd06398a8d38d21f1026e707910f3f3504

  • SHA512

    1d7aaebbc2d8b156975e8000251a7c78573b8af9fbc278c3e96aa4a6988f41d686b4c79001465587f5f2982a5a9e373e8fc2eed902a97a98132febcbbd7bb179

  • SSDEEP

    384:L+s2vDprYpKHjq1BmltqiE4W/tjp9Fy5XHgGLhq5KbEXsC5AmXNVzeeom/9+WNRM:n2d9jq1BmDWhI5Xzm98IXN5/9wkO

Score
7/10
discovery

Malware Config

Targets

    • Target

      fa54cbcd707f89f87ec319865a0d0331_JaffaCakes118

    • Size

      27KB

    • MD5

      fa54cbcd707f89f87ec319865a0d0331

    • SHA1

      d4c80761bab1a591830a352997692e18bdc4aab9

    • SHA256

      646897698a86531cd5f82597d10995bd06398a8d38d21f1026e707910f3f3504

    • SHA512

      1d7aaebbc2d8b156975e8000251a7c78573b8af9fbc278c3e96aa4a6988f41d686b4c79001465587f5f2982a5a9e373e8fc2eed902a97a98132febcbbd7bb179

    • SSDEEP

      384:L+s2vDprYpKHjq1BmltqiE4W/tjp9Fy5XHgGLhq5KbEXsC5AmXNVzeeom/9+WNRM:n2d9jq1BmDWhI5Xzm98IXN5/9wkO

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks