Overview

overview

7

Static

static

3

4271ad4240...18.exe

windows7-x64

7

4271ad4240...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4271ad4240d1c8fbbf090b91ea82d5ca_JaffaCakes118

  • Size

    19KB

  • Sample

    241014-p5g1yawemh

  • MD5

    4271ad4240d1c8fbbf090b91ea82d5ca

  • SHA1

    82478decd60b11ca1e546b44e9b3248b0919fdff

  • SHA256

    e82ae25cf54eed57874757765870dd09b327e12e81836b2db8e77f97398fa330

  • SHA512

    2674111daeb8ff464c52632a80ef615316b78a54e1f7178cbffdcf68c071c3c049e1973df988b3e31a2e1111a2592a0c308ecd4d7002d349346b6635e1718630

  • SSDEEP

    384:JzP2Apnh4r3gI7v6S293irswDLWdedjX/tpKEmgcg6E/Y:JzPppnerQK6RaWedjKEmJDE/Y

Score
7/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      4271ad4240d1c8fbbf090b91ea82d5ca_JaffaCakes118

    • Size

      19KB

    • MD5

      4271ad4240d1c8fbbf090b91ea82d5ca

    • SHA1

      82478decd60b11ca1e546b44e9b3248b0919fdff

    • SHA256

      e82ae25cf54eed57874757765870dd09b327e12e81836b2db8e77f97398fa330

    • SHA512

      2674111daeb8ff464c52632a80ef615316b78a54e1f7178cbffdcf68c071c3c049e1973df988b3e31a2e1111a2592a0c308ecd4d7002d349346b6635e1718630

    • SSDEEP

      384:JzP2Apnh4r3gI7v6S293irswDLWdedjX/tpKEmgcg6E/Y:JzPppnerQK6RaWedjKEmJDE/Y

    Score
    7/10
    defense_evasiondiscovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks