General
-
Target
1a5b56095e969cf84e0861808f6bbe80_JaffaCakes118
-
Size
746KB
-
Sample
240628-q4gt8asfqd
-
MD5
1a5b56095e969cf84e0861808f6bbe80
-
SHA1
075191c1c4106dbf5a33c27a13342883e7b02677
-
SHA256
e87d887bc9e1a645cb827b7c73980fad1f0fc8c55e2887c0237f412f1ef2fe9e
-
SHA512
0dbfca01433f0688671dafbfec9b2d19ba995b85f5ec6c7bca14d7116ce790af9b741e8b46b11128d613e3c9bef210921f7b03f08832020f775758fbec9e02ad
-
SSDEEP
12288:O6A84PaHhfD/tV9sj5NKR0pau9XGyu2qBVGLQyTPfha:zAmBpVKHu0Mu9Xo20VGLVP5a
Behavioral task
behavioral1
Sample
1a5b56095e969cf84e0861808f6bbe80_JaffaCakes118.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
1a5b56095e969cf84e0861808f6bbe80_JaffaCakes118
-
Size
746KB
-
MD5
1a5b56095e969cf84e0861808f6bbe80
-
SHA1
075191c1c4106dbf5a33c27a13342883e7b02677
-
SHA256
e87d887bc9e1a645cb827b7c73980fad1f0fc8c55e2887c0237f412f1ef2fe9e
-
SHA512
0dbfca01433f0688671dafbfec9b2d19ba995b85f5ec6c7bca14d7116ce790af9b741e8b46b11128d613e3c9bef210921f7b03f08832020f775758fbec9e02ad
-
SSDEEP
12288:O6A84PaHhfD/tV9sj5NKR0pau9XGyu2qBVGLQyTPfha:zAmBpVKHu0Mu9Xo20VGLVP5a
-
Modifies firewall policy service
-
Modifies security service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-