Overview

overview

10

Static

static

3

0037c9cf9a...18.exe

windows7-x64

10

0037c9cf9a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0037c9cf9a5d823ae5c0c1db055d6872_JaffaCakes118

  • Size

    132KB

  • Sample

    240619-ykymmatclk

  • MD5

    0037c9cf9a5d823ae5c0c1db055d6872

  • SHA1

    d07bf0cc5800e7a9f5480f79490127e9d5f45697

  • SHA256

    9e566415f3ce3205943299b4e4c22605599fe401288b0fa3e5048562defcb228

  • SHA512

    972b0216d1742440e4fcb1d55f916efa9ee2e384ba8d5858a34f199e39b47e2fce1686c3e5cff6cd657f85ddaf4f7d4226923a7932fb6dbaf19630c31f83c2c3

  • SSDEEP

    1536:nKxPIeTIyXFixXVG4e2JLBJ3Ue05znybzPe9jRwo7JaS1:sIeTIOFixFG4e1ybGtwQL

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0037c9cf9a5d823ae5c0c1db055d6872_JaffaCakes118

    • Size

      132KB

    • MD5

      0037c9cf9a5d823ae5c0c1db055d6872

    • SHA1

      d07bf0cc5800e7a9f5480f79490127e9d5f45697

    • SHA256

      9e566415f3ce3205943299b4e4c22605599fe401288b0fa3e5048562defcb228

    • SHA512

      972b0216d1742440e4fcb1d55f916efa9ee2e384ba8d5858a34f199e39b47e2fce1686c3e5cff6cd657f85ddaf4f7d4226923a7932fb6dbaf19630c31f83c2c3

    • SSDEEP

      1536:nKxPIeTIyXFixXVG4e2JLBJ3Ue05znybzPe9jRwo7JaS1:sIeTIOFixFG4e1ybGtwQL

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks