General
-
Target
1c2c61a39efa17cd51cb06390493c488_JaffaCakes118
-
Size
668KB
-
Sample
240701-xwdk6aybmr
-
MD5
1c2c61a39efa17cd51cb06390493c488
-
SHA1
822a96a06ba1e4947839260903f4643ba0946f9c
-
SHA256
7e366c0f7f4debcf28a1c5c9d9188ab8959af12afbea80f01fd85deffec109a5
-
SHA512
95b562bab74c5c93b02d286c5d9dd3fd73298c23009394fb9d042f6c170f2973af98fdcfaf7c48c6ebd6f075c1344188f7d95c642296e6f82487eebc17d94de3
-
SSDEEP
12288:afFcGAT79cO2ZKpKHNMF4lSHgojKs6iVjXU8Qfyr/GL01Te:YpYoZKEMFLHgoTzVjk8QKLGLsq
Behavioral task
behavioral1
Sample
1c2c61a39efa17cd51cb06390493c488_JaffaCakes118.exe
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
1c2c61a39efa17cd51cb06390493c488_JaffaCakes118
-
Size
668KB
-
MD5
1c2c61a39efa17cd51cb06390493c488
-
SHA1
822a96a06ba1e4947839260903f4643ba0946f9c
-
SHA256
7e366c0f7f4debcf28a1c5c9d9188ab8959af12afbea80f01fd85deffec109a5
-
SHA512
95b562bab74c5c93b02d286c5d9dd3fd73298c23009394fb9d042f6c170f2973af98fdcfaf7c48c6ebd6f075c1344188f7d95c642296e6f82487eebc17d94de3
-
SSDEEP
12288:afFcGAT79cO2ZKpKHNMF4lSHgojKs6iVjXU8Qfyr/GL01Te:YpYoZKEMFLHgoTzVjk8QKLGLsq
-
Modifies firewall policy service
-
Modifies security service
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-