General
-
Target
1f18839709ec59ce1b42254d69810bdc_JaffaCakes118
-
Size
1.0MB
-
Sample
240702-m6v8vatbnm
-
MD5
1f18839709ec59ce1b42254d69810bdc
-
SHA1
b4c4dd3003469a6f30a749cdadbca651684e95aa
-
SHA256
57ea44e7ea896880c5b5326a00cf6527c77ad7c6380439163e11212613127d93
-
SHA512
2ddf8a10c0aee436f0141139285f1c837b08ebae6d9022791680c0e528eaedaed1946335e37fb3418c9b37e8ba8ea8f46484e292989eba5fbc795eb4a732db84
-
SSDEEP
24576:GiysXgXVrDbWEQeboNgj2ERfspk7MheYmv2LYmv2:VjXgXVHbFvkDo0pk7M+vev
Static task
static1
Behavioral task
behavioral1
Sample
1f18839709ec59ce1b42254d69810bdc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1f18839709ec59ce1b42254d69810bdc_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Malware Config
Extracted
latentbot
slavezbyjay.zapto.org
Targets
-
-
Target
1f18839709ec59ce1b42254d69810bdc_JaffaCakes118
-
Size
1.0MB
-
MD5
1f18839709ec59ce1b42254d69810bdc
-
SHA1
b4c4dd3003469a6f30a749cdadbca651684e95aa
-
SHA256
57ea44e7ea896880c5b5326a00cf6527c77ad7c6380439163e11212613127d93
-
SHA512
2ddf8a10c0aee436f0141139285f1c837b08ebae6d9022791680c0e528eaedaed1946335e37fb3418c9b37e8ba8ea8f46484e292989eba5fbc795eb4a732db84
-
SSDEEP
24576:GiysXgXVrDbWEQeboNgj2ERfspk7MheYmv2LYmv2:VjXgXVHbFvkDo0pk7M+vev
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-