Overview

overview

10

Static

static

3

f3cafc15fc...18.exe

windows7-x64

10

f3cafc15fc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f3cafc15fc6c175ca63cba4e5586cf73_JaffaCakes118

  • Size

    368KB

  • Sample

    240416-s3zprafd5x

  • MD5

    f3cafc15fc6c175ca63cba4e5586cf73

  • SHA1

    2d4edbde23347d3894cee0e828e458c5398d3ef7

  • SHA256

    e9779e89f4e5a31ab9b419deb1b99a9361e1afffd007e729348b113e39a490a2

  • SHA512

    54eef3d812a4718842e1592f34fb84f38b0f5055025add2f947ae3c512e078c479f7b8ef0b64fb2e128de29b6bd9e89c93a9d17692d297ef9373dd9f5c8ce134

  • SSDEEP

    3072:2M6Jo61pKPmsS1Iff0al3vh5if6PrSCjF8LnI2sMDmuUiP64BP0:21C6ni3tfi6xUIsDmuxP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      f3cafc15fc6c175ca63cba4e5586cf73_JaffaCakes118

    • Size

      368KB

    • MD5

      f3cafc15fc6c175ca63cba4e5586cf73

    • SHA1

      2d4edbde23347d3894cee0e828e458c5398d3ef7

    • SHA256

      e9779e89f4e5a31ab9b419deb1b99a9361e1afffd007e729348b113e39a490a2

    • SHA512

      54eef3d812a4718842e1592f34fb84f38b0f5055025add2f947ae3c512e078c479f7b8ef0b64fb2e128de29b6bd9e89c93a9d17692d297ef9373dd9f5c8ce134

    • SSDEEP

      3072:2M6Jo61pKPmsS1Iff0al3vh5if6PrSCjF8LnI2sMDmuUiP64BP0:21C6ni3tfi6xUIsDmuxP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks