Overview

overview

10

Static

static

3

fdc70db941...18.exe

windows7-x64

10

fdc70db941...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fdc70db9411190ab58be18c586f9187b_JaffaCakes118

  • Size

    212KB

  • Sample

    240420-18s36aca21

  • MD5

    fdc70db9411190ab58be18c586f9187b

  • SHA1

    fe2a0693fa6b9318cc5923b7101d303cfa7e197b

  • SHA256

    786e5432e2f3a8a26068cb273fc68c6585aa8732ba4c2369014c62bc01c002ef

  • SHA512

    f2e4bf15d5a04e9bee96ca5e130d90aeaf6a50eef005cb8ab948533e4e4bd2e12039e3fa9ca040b35d8661f6f9ee1b4496b87dec7bb3fcca10fcc5f513d7e2fe

  • SSDEEP

    6144:IW0PiUJ8N2vqDdWBHZXEG0vkIMsFaLwrNKAHvIkFjpgT:IhiUoKyWHZwrNvv/AT

Score
10/10
evasion

Malware Config

Targets

    • Target

      fdc70db9411190ab58be18c586f9187b_JaffaCakes118

    • Size

      212KB

    • MD5

      fdc70db9411190ab58be18c586f9187b

    • SHA1

      fe2a0693fa6b9318cc5923b7101d303cfa7e197b

    • SHA256

      786e5432e2f3a8a26068cb273fc68c6585aa8732ba4c2369014c62bc01c002ef

    • SHA512

      f2e4bf15d5a04e9bee96ca5e130d90aeaf6a50eef005cb8ab948533e4e4bd2e12039e3fa9ca040b35d8661f6f9ee1b4496b87dec7bb3fcca10fcc5f513d7e2fe

    • SSDEEP

      6144:IW0PiUJ8N2vqDdWBHZXEG0vkIMsFaLwrNKAHvIkFjpgT:IhiUoKyWHZwrNvv/AT

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks