Overview

overview

10

Static

static

3

25fa4aaadf...18.exe

windows7-x64

10

25fa4aaadf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    25fa4aaadf16c5a6c2ec5a47da5e45b7_JaffaCakes118

  • Size

    116KB

  • Sample

    240329-s7krdscc99

  • MD5

    25fa4aaadf16c5a6c2ec5a47da5e45b7

  • SHA1

    e85f73c86db3c70d0ade694c31371b075e56c6b3

  • SHA256

    4f4a1bcbde4482776ee1fef618790320ec0405553bca8507d5df586e2ca14898

  • SHA512

    dab40c36d9d615a0054fb600fd36e58acfdbb27838412021d3daa4507429900f4b5ae58a687e5ee622c70aef27c6dd8dded8d43dd4d34599b13c559f24756adb

  • SSDEEP

    1536:jdB3h7XVA3fs8koyFFx57Yj3oJoFDRhQHy4kt+Z:5JRlKfMLEj3oJoXhay+Z

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      25fa4aaadf16c5a6c2ec5a47da5e45b7_JaffaCakes118

    • Size

      116KB

    • MD5

      25fa4aaadf16c5a6c2ec5a47da5e45b7

    • SHA1

      e85f73c86db3c70d0ade694c31371b075e56c6b3

    • SHA256

      4f4a1bcbde4482776ee1fef618790320ec0405553bca8507d5df586e2ca14898

    • SHA512

      dab40c36d9d615a0054fb600fd36e58acfdbb27838412021d3daa4507429900f4b5ae58a687e5ee622c70aef27c6dd8dded8d43dd4d34599b13c559f24756adb

    • SSDEEP

      1536:jdB3h7XVA3fs8koyFFx57Yj3oJoFDRhQHy4kt+Z:5JRlKfMLEj3oJoXhay+Z

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks