Overview

overview

10

Static

static

3

cb6d2a47e5...18.exe

windows7-x64

10

cb6d2a47e5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cb6d2a47e5fec3b442395777603904de_JaffaCakes118

  • Size

    128KB

  • Sample

    240405-fk6zwsce9w

  • MD5

    cb6d2a47e5fec3b442395777603904de

  • SHA1

    1339a88239a370c557d72f763453d5818f3867a7

  • SHA256

    ec2825db38fe5757823b5b01a7582d3b85e4443375c43fbd8616b3ca9967d04f

  • SHA512

    2127a88c2abd9b138fe7975884add6b1689409f0d27d6eb08698dec980437ff69c0662287521c3ba9eed27ca02edb2df23a08e7b7f9dd36b3eb009de2ab26237

  • SSDEEP

    768:zV/HdS9fvXe04H7cHPHYmug6UXQm1dIZE2ocOT77e:zyWHyj6S3T77

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      cb6d2a47e5fec3b442395777603904de_JaffaCakes118

    • Size

      128KB

    • MD5

      cb6d2a47e5fec3b442395777603904de

    • SHA1

      1339a88239a370c557d72f763453d5818f3867a7

    • SHA256

      ec2825db38fe5757823b5b01a7582d3b85e4443375c43fbd8616b3ca9967d04f

    • SHA512

      2127a88c2abd9b138fe7975884add6b1689409f0d27d6eb08698dec980437ff69c0662287521c3ba9eed27ca02edb2df23a08e7b7f9dd36b3eb009de2ab26237

    • SSDEEP

      768:zV/HdS9fvXe04H7cHPHYmug6UXQm1dIZE2ocOT77e:zyWHyj6S3T77

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks