Overview

overview

10

Static

static

3

fe03c6cab7...18.exe

windows7-x64

10

fe03c6cab7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe03c6cab7c4b5e09bcfdf7d4d7e87e0_JaffaCakes118

  • Size

    272KB

  • Sample

    240421-axyldsec27

  • MD5

    fe03c6cab7c4b5e09bcfdf7d4d7e87e0

  • SHA1

    067f68d7da560a99e22a6e6d6a3c65d6a594119d

  • SHA256

    100e85bf99938bbccf4a3b6fe44921fc41317e727fa3056a3e0b7c525e97bd6d

  • SHA512

    f3ff9e0e3254cae0e0ed2a4ba5a9c562906ec578af31a37a591e261db82d890121acd3bdd8a12ea524473876eb40b3a01d7607d9e3f998cd7bbac40c2f038642

  • SSDEEP

    6144:z3aAKlQxchRdjLmtrBuMrdekUH63u+X5sc57/k:m4xGLTuPL5g

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      fe03c6cab7c4b5e09bcfdf7d4d7e87e0_JaffaCakes118

    • Size

      272KB

    • MD5

      fe03c6cab7c4b5e09bcfdf7d4d7e87e0

    • SHA1

      067f68d7da560a99e22a6e6d6a3c65d6a594119d

    • SHA256

      100e85bf99938bbccf4a3b6fe44921fc41317e727fa3056a3e0b7c525e97bd6d

    • SHA512

      f3ff9e0e3254cae0e0ed2a4ba5a9c562906ec578af31a37a591e261db82d890121acd3bdd8a12ea524473876eb40b3a01d7607d9e3f998cd7bbac40c2f038642

    • SSDEEP

      6144:z3aAKlQxchRdjLmtrBuMrdekUH63u+X5sc57/k:m4xGLTuPL5g

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks