Overview

overview

10

Static

static

10

aabc076fee...18.exe

windows7-x64

aabc076fee...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aabc076fee2a88b3032ee28d5ad25240_JaffaCakes118

  • Size

    72KB

  • Sample

    241128-dhwp2asmdy

  • MD5

    aabc076fee2a88b3032ee28d5ad25240

  • SHA1

    bf26c420e3030707702e44e59950e9284f52fc9f

  • SHA256

    ce4932e4f645f24aa7a86709c093e8d8013cf97969f82880c9d8e5f1b1a04fe2

  • SHA512

    aebecdf8c53de7f3ba68800f2fbfb9e776897699f688efc8e16b0cd6140cb8055ad6e421e4e61c2dfba53703039b870ae5025de1434e35153279b01154e7117b

  • SSDEEP

    768:KI3T3XCyKCG4kotNNGVjYQpvJXN5T/wG3JcoYRjZk37x/dbEYfvyJBn+:Ke3SANNG/X95T/wGZeRjK3t/dQWeB+

Score
10/10
modiloaderdiscovery

Malware Config

Targets

    • Target

      aabc076fee2a88b3032ee28d5ad25240_JaffaCakes118

    • Size

      72KB

    • MD5

      aabc076fee2a88b3032ee28d5ad25240

    • SHA1

      bf26c420e3030707702e44e59950e9284f52fc9f

    • SHA256

      ce4932e4f645f24aa7a86709c093e8d8013cf97969f82880c9d8e5f1b1a04fe2

    • SHA512

      aebecdf8c53de7f3ba68800f2fbfb9e776897699f688efc8e16b0cd6140cb8055ad6e421e4e61c2dfba53703039b870ae5025de1434e35153279b01154e7117b

    • SSDEEP

      768:KI3T3XCyKCG4kotNNGVjYQpvJXN5T/wG3JcoYRjZk37x/dbEYfvyJBn+:Ke3SANNG/X95T/wGZeRjK3t/dQWeB+

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks