Overview

overview

10

Static

static

3

ecd4809e43...18.exe

windows7-x64

10

ecd4809e43...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ecd4809e431ba3b6bd9054f0e3ba0bc9_JaffaCakes118

  • Size

    168KB

  • Sample

    240411-hnm3aseb33

  • MD5

    ecd4809e431ba3b6bd9054f0e3ba0bc9

  • SHA1

    88edffb8fdc6e9b10d9c77456bef503e35cd888a

  • SHA256

    3d7960459775c79f56b75ad912ab2c77955e50ab09e958c8a54b59ea355ec48c

  • SHA512

    1bcf95395abe1240faaedd6465dbd5d763ccf99e961e91cf4fb3ca11e4193e66b4687ce2bed886116a4549f02b6c27fc7f3e6f1bd5915205e9547a4ae9570f9c

  • SSDEEP

    768:Dx3k9S4pbU2xegyvWvg0hv4ZZs9y01+OkEHS8+nUnmfFB5R11dXcSv7U1aM:DgpbU2Igk0hvp9bwfFB5R1bcGQX

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      ecd4809e431ba3b6bd9054f0e3ba0bc9_JaffaCakes118

    • Size

      168KB

    • MD5

      ecd4809e431ba3b6bd9054f0e3ba0bc9

    • SHA1

      88edffb8fdc6e9b10d9c77456bef503e35cd888a

    • SHA256

      3d7960459775c79f56b75ad912ab2c77955e50ab09e958c8a54b59ea355ec48c

    • SHA512

      1bcf95395abe1240faaedd6465dbd5d763ccf99e961e91cf4fb3ca11e4193e66b4687ce2bed886116a4549f02b6c27fc7f3e6f1bd5915205e9547a4ae9570f9c

    • SSDEEP

      768:Dx3k9S4pbU2xegyvWvg0hv4ZZs9y01+OkEHS8+nUnmfFB5R11dXcSv7U1aM:DgpbU2Igk0hvp9bwfFB5R1bcGQX

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks