Overview

overview

10

Static

static

3

f1f095c8a6...18.exe

windows7-x64

10

f1f095c8a6...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f1f095c8a62f0ae8f3be60bad82b0e9b_JaffaCakes118

  • Size

    148KB

  • Sample

    240415-z3j3maaf81

  • MD5

    f1f095c8a62f0ae8f3be60bad82b0e9b

  • SHA1

    49fcceb8da2940c2606fc794633c79bfbd52d52c

  • SHA256

    ed81bb0f07899cdd3c9545937f50ab505a7ec8e85785be9ce1e2c03345a854cb

  • SHA512

    7b2ea7fa7b73eb9d182b14dd8ac34b289097804eb206f057dc3882ccd9207e986030aaee1fb33939bd3528cba0d7aa4f3102a417ca17860955040bd2d5cdaf54

  • SSDEEP

    3072:/iFiQh4mRpDGq7At/yRWr2wA36nbMUq8hFOdhIk4oQZiE6W:KFdh96F90Wf7nJPwdzWp

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f1f095c8a62f0ae8f3be60bad82b0e9b_JaffaCakes118

    • Size

      148KB

    • MD5

      f1f095c8a62f0ae8f3be60bad82b0e9b

    • SHA1

      49fcceb8da2940c2606fc794633c79bfbd52d52c

    • SHA256

      ed81bb0f07899cdd3c9545937f50ab505a7ec8e85785be9ce1e2c03345a854cb

    • SHA512

      7b2ea7fa7b73eb9d182b14dd8ac34b289097804eb206f057dc3882ccd9207e986030aaee1fb33939bd3528cba0d7aa4f3102a417ca17860955040bd2d5cdaf54

    • SSDEEP

      3072:/iFiQh4mRpDGq7At/yRWr2wA36nbMUq8hFOdhIk4oQZiE6W:KFdh96F90Wf7nJPwdzWp

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks