General
-
Target
81e348ed21584b13021369f26643c06b_JaffaCakes118
-
Size
42KB
-
Sample
241031-gm3wpazmdy
-
MD5
81e348ed21584b13021369f26643c06b
-
SHA1
8d6861cdfa93d8fafacd4c180bbd9bad18079b33
-
SHA256
e0bfbca051ceeedf4321bdb6a2125f448bc3950594b9b1cbffcd3a983db7ca20
-
SHA512
e1755a2d315a798e44948ade92bcbae5a2c5df6cd6d382bcef7cd246d39720a882e20e5e826b34570229ca64213396d646ee25c90ccece37557f57c5e786cf7f
-
SSDEEP
768:48exVIp4uwDjvXOTIkbM3nO5OI4XjJ5ijgrehtAOjp36SZU/JOOU/SC8:4Fz+hwj+sOjpqWaIZ8
Static task
static1
Behavioral task
behavioral1
Sample
81e348ed21584b13021369f26643c06b_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
81e348ed21584b13021369f26643c06b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
81e348ed21584b13021369f26643c06b_JaffaCakes118
-
Size
42KB
-
MD5
81e348ed21584b13021369f26643c06b
-
SHA1
8d6861cdfa93d8fafacd4c180bbd9bad18079b33
-
SHA256
e0bfbca051ceeedf4321bdb6a2125f448bc3950594b9b1cbffcd3a983db7ca20
-
SHA512
e1755a2d315a798e44948ade92bcbae5a2c5df6cd6d382bcef7cd246d39720a882e20e5e826b34570229ca64213396d646ee25c90ccece37557f57c5e786cf7f
-
SSDEEP
768:48exVIp4uwDjvXOTIkbM3nO5OI4XjJ5ijgrehtAOjp36SZU/JOOU/SC8:4Fz+hwj+sOjpqWaIZ8
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory
-