Overview

overview

7

Static

static

3

feba541b5a...18.exe

windows7-x64

7

feba541b5a...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    feba541b5ab96fb02d364f8f31133341_JaffaCakes118

  • Size

    384KB

  • Sample

    240929-rwxfdaxhnq

  • MD5

    feba541b5ab96fb02d364f8f31133341

  • SHA1

    45b2c6cc0d67005b671dd114678554aec3696406

  • SHA256

    446abaf1799d916e2e2aedc5a7f4125de67263a5057396a31c1305cc0cd24b12

  • SHA512

    a1dbefb50fc925bb48eed02b1a593ee9fff5b0c681b5956bb6d1227c4790c186139370c1062af342b08d532c5f424712ca6334522121e90187b0109449c2ce39

  • SSDEEP

    6144:zIUAoX5DbxT6KZrFfjCXlXApqM/GcpyZe2HaoWwdNNkDKp63y:sKtlXr9jCXlwjyAya9wdNN563y

Score
7/10
discovery

Malware Config

Targets

    • Target

      feba541b5ab96fb02d364f8f31133341_JaffaCakes118

    • Size

      384KB

    • MD5

      feba541b5ab96fb02d364f8f31133341

    • SHA1

      45b2c6cc0d67005b671dd114678554aec3696406

    • SHA256

      446abaf1799d916e2e2aedc5a7f4125de67263a5057396a31c1305cc0cd24b12

    • SHA512

      a1dbefb50fc925bb48eed02b1a593ee9fff5b0c681b5956bb6d1227c4790c186139370c1062af342b08d532c5f424712ca6334522121e90187b0109449c2ce39

    • SSDEEP

      6144:zIUAoX5DbxT6KZrFfjCXlXApqM/GcpyZe2HaoWwdNNkDKp63y:sKtlXr9jCXlwjyAya9wdNN563y

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks