Overview

overview

10

Static

static

3

004bb3d7fe...18.exe

windows7-x64

10

004bb3d7fe...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    004bb3d7fe606c0395a4498c92b12751_JaffaCakes118

  • Size

    96KB

  • Sample

    240619-y1lm1athjj

  • MD5

    004bb3d7fe606c0395a4498c92b12751

  • SHA1

    4de09ee6b2da80ffa6c976a0e67ad7c31faf7b9a

  • SHA256

    031ae0f6a9eddc291de2e093db67a9a51a756f85e39939dc73e85bd33c1b93b1

  • SHA512

    5588743285e423537775a87aefea67890c27addd2c5adbb0b8ae56d2ec8a4fa7f0afeb4efbb826b1345c184e0f7ebe2c260ac233d6f1b06eeb9f19307ec254a9

  • SSDEEP

    1536:PgvEg52X9tyVQO8P8ychA+wjj3RJNEo/knRzdnynE7RldNEP8lijOezNIjnZ4P:PmE/XelychA3zR3Ek65RldqzCnqP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      004bb3d7fe606c0395a4498c92b12751_JaffaCakes118

    • Size

      96KB

    • MD5

      004bb3d7fe606c0395a4498c92b12751

    • SHA1

      4de09ee6b2da80ffa6c976a0e67ad7c31faf7b9a

    • SHA256

      031ae0f6a9eddc291de2e093db67a9a51a756f85e39939dc73e85bd33c1b93b1

    • SHA512

      5588743285e423537775a87aefea67890c27addd2c5adbb0b8ae56d2ec8a4fa7f0afeb4efbb826b1345c184e0f7ebe2c260ac233d6f1b06eeb9f19307ec254a9

    • SSDEEP

      1536:PgvEg52X9tyVQO8P8ychA+wjj3RJNEo/knRzdnynE7RldNEP8lijOezNIjnZ4P:PmE/XelychA3zR3Ek65RldqzCnqP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks