Overview

overview

10

Static

static

3

027787dcef...18.exe

windows7-x64

10

027787dcef...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    027787dcefb34e6716972f3c78508805_JaffaCakes118

  • Size

    100KB

  • Sample

    240620-d6v4eawgqg

  • MD5

    027787dcefb34e6716972f3c78508805

  • SHA1

    32d84476bdd141eadaf0461d21e78f887ba90ca8

  • SHA256

    1998efb211f9df7298a09695b802b1efa49dad3c2c541954d0feb393fec0c5ac

  • SHA512

    e8e3d7bd446cdd1232fbc03e3df3ba5885e70c3c8e2acf3d9d7b1726433e529d0d5b31d00977cac280b4c91243a411b3470f4a90f13adb419dd70c3ed8805f6a

  • SSDEEP

    1536:kTtGX82NTzweNMGAc4ohrPXo+73Rez8b0SywNIjni:FwekurPX7CwCni

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      027787dcefb34e6716972f3c78508805_JaffaCakes118

    • Size

      100KB

    • MD5

      027787dcefb34e6716972f3c78508805

    • SHA1

      32d84476bdd141eadaf0461d21e78f887ba90ca8

    • SHA256

      1998efb211f9df7298a09695b802b1efa49dad3c2c541954d0feb393fec0c5ac

    • SHA512

      e8e3d7bd446cdd1232fbc03e3df3ba5885e70c3c8e2acf3d9d7b1726433e529d0d5b31d00977cac280b4c91243a411b3470f4a90f13adb419dd70c3ed8805f6a

    • SSDEEP

      1536:kTtGX82NTzweNMGAc4ohrPXo+73Rez8b0SywNIjni:FwekurPX7CwCni

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks