Overview

overview

10

Static

static

3

01d811295c...18.exe

windows7-x64

10

01d811295c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    01d811295c1870f132fbc38da7752429_JaffaCakes118

  • Size

    188KB

  • Sample

    240620-ccnlsssdne

  • MD5

    01d811295c1870f132fbc38da7752429

  • SHA1

    bc138ba8161de347486f549cedb27d1983c0e243

  • SHA256

    cfcc28b59947dafe577a0831401b461eed8a87ad6ce11624b4d7be5606827afd

  • SHA512

    be070fd543a243252808384000c1a96931d216bddbaeec4474866a31ea9ec95eafb1ae3c1898f22c44ba8699fd03507f0b14644ffee29c0ab271b512c6152150

  • SSDEEP

    3072:pcJc73t2DZhv8yapZIvcFeqoSeaX/m7bfTWan9LxJ8DJOpPVKuqmqTgwa9MTXKK9:UcreZhvzWevcFe/aX/m7bfTWan9lJ8DD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      01d811295c1870f132fbc38da7752429_JaffaCakes118

    • Size

      188KB

    • MD5

      01d811295c1870f132fbc38da7752429

    • SHA1

      bc138ba8161de347486f549cedb27d1983c0e243

    • SHA256

      cfcc28b59947dafe577a0831401b461eed8a87ad6ce11624b4d7be5606827afd

    • SHA512

      be070fd543a243252808384000c1a96931d216bddbaeec4474866a31ea9ec95eafb1ae3c1898f22c44ba8699fd03507f0b14644ffee29c0ab271b512c6152150

    • SSDEEP

      3072:pcJc73t2DZhv8yapZIvcFeqoSeaX/m7bfTWan9LxJ8DJOpPVKuqmqTgwa9MTXKK9:UcreZhvzWevcFe/aX/m7bfTWan9lJ8DD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks