Overview

overview

8

Static

static

3

caf7f0def5...18.exe

windows7-x64

8

caf7f0def5...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    caf7f0def54e59ca3718170062e6bffa_JaffaCakes118

  • Size

    62KB

  • Sample

    240405-e7d2yscg62

  • MD5

    caf7f0def54e59ca3718170062e6bffa

  • SHA1

    fb88764219b5eb9b57251523b90965a9a88e31ec

  • SHA256

    125cc811640f95956f08e42173509d50755ab24280d26c10463cbbe3c5138018

  • SHA512

    f036270f7cc9c751e29beb8ba8faf0f700b9e174ced59efe11ecd58f29e9c9db0a28ea634ca5a2000059d79f0d8d736abbeea3753dfd9a8ab0fe2a511ada930a

  • SSDEEP

    768:1m/QojCpHfx0lk6SLZRI+WE6F2UzpHjhm8f10+a8m/QojCpHfx0tJztvI:EQojY5LLI+W5ljGQojBtvI

Score
8/10

Malware Config

Targets

    • Target

      caf7f0def54e59ca3718170062e6bffa_JaffaCakes118

    • Size

      62KB

    • MD5

      caf7f0def54e59ca3718170062e6bffa

    • SHA1

      fb88764219b5eb9b57251523b90965a9a88e31ec

    • SHA256

      125cc811640f95956f08e42173509d50755ab24280d26c10463cbbe3c5138018

    • SHA512

      f036270f7cc9c751e29beb8ba8faf0f700b9e174ced59efe11ecd58f29e9c9db0a28ea634ca5a2000059d79f0d8d736abbeea3753dfd9a8ab0fe2a511ada930a

    • SSDEEP

      768:1m/QojCpHfx0lk6SLZRI+WE6F2UzpHjhm8f10+a8m/QojCpHfx0tJztvI:EQojY5LLI+W5ljGQojBtvI

    Score
    8/10

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks