d2c0ef1192981064b5800b3eab3e52cbb82295c0e103f6d07603cb9085389b08 | Triage

Submit
Reports

Overview

overview

Static

static

3

45ba7d955f...18.exe

windows7-x64

45ba7d955f...18.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

Target

45ba7d955fa92feef43e45d70b2499f4_JaffaCakes118
Size

64KB
Sample

241015-ejyfpatdkf
MD5

45ba7d955fa92feef43e45d70b2499f4
SHA1

a80a6bfaa839a719f1ecefe791b33701dccfc690
SHA256

d2c0ef1192981064b5800b3eab3e52cbb82295c0e103f6d07603cb9085389b08
SHA512

b51c6494a9be54c7beed8571d8d469f9673ee4761fc69d3f9fd58e9ba3da0b620154904053444494bd2fcf1d07868ad67704befffb270b3298ebbd093473b131
SSDEEP

1536:WyZMSZFvknTePMZd4k4kJJs4Romu/ZW+0Yju2YurL73gxX/E:xZMJnTeM4cJJs45sHiILj08

Score

10^/10

discovery evasion

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

45ba7d955fa92feef43e45d70b2499f4_JaffaCakes118.exe

Resource

win7-20240708-en

discovery evasion

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

45ba7d955fa92feef43e45d70b2499f4_JaffaCakes118.exe

Resource

win10v2004-20241007-en

discovery evasion

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  45ba7d955fa92feef43e45d70b2499f4_JaffaCakes118
- Size
  
  64KB
- MD5
  
  45ba7d955fa92feef43e45d70b2499f4
- SHA1
  
  a80a6bfaa839a719f1ecefe791b33701dccfc690
- SHA256
  
  d2c0ef1192981064b5800b3eab3e52cbb82295c0e103f6d07603cb9085389b08
- SHA512
  
  b51c6494a9be54c7beed8571d8d469f9673ee4761fc69d3f9fd58e9ba3da0b620154904053444494bd2fcf1d07868ad67704befffb270b3298ebbd093473b131
- SSDEEP
  
  1536:WyZMSZFvknTePMZd4k4kJJs4Romu/ZW+0Yju2YurL73gxX/E:xZMJnTeM4cJJs45sHiILj08
Score

10^/10

discovery evasion
- Modifies visibility of file extensions in Explorer
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Loads dropped DLL
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion

© 2018-2025

Terms | Privacy