Overview

overview

10

Static

static

3

06da784813...18.exe

windows7-x64

10

06da784813...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    06da784813a7fd357d9645dbbca337bc_JaffaCakes118

  • Size

    124KB

  • Sample

    240620-rwd9sssdlf

  • MD5

    06da784813a7fd357d9645dbbca337bc

  • SHA1

    118a7e90af2421b7e3c35e0515675fdfd976d833

  • SHA256

    dcaacf614f8c7ecf56054b652a37b6d069bf1e5572f7a7aba6880e701ebb21ce

  • SHA512

    73b4feed38870944d90cd8a39daf2698494bc3e067c038f2edbffbf7ae95d5031ff8a4f07a53eb063e2f05af26935e757eb3c2e6e054561843612a6b57236536

  • SSDEEP

    3072:q6c56V/cO4SqF8UAAWiDnpGsDH38rMRKRm9I78qsMm68KVaXGDEsSlek:q6VkOlqF8UAAWiDpGsDgGzKVaXCEsSle

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      06da784813a7fd357d9645dbbca337bc_JaffaCakes118

    • Size

      124KB

    • MD5

      06da784813a7fd357d9645dbbca337bc

    • SHA1

      118a7e90af2421b7e3c35e0515675fdfd976d833

    • SHA256

      dcaacf614f8c7ecf56054b652a37b6d069bf1e5572f7a7aba6880e701ebb21ce

    • SHA512

      73b4feed38870944d90cd8a39daf2698494bc3e067c038f2edbffbf7ae95d5031ff8a4f07a53eb063e2f05af26935e757eb3c2e6e054561843612a6b57236536

    • SSDEEP

      3072:q6c56V/cO4SqF8UAAWiDnpGsDH38rMRKRm9I78qsMm68KVaXGDEsSlek:q6VkOlqF8UAAWiDpGsDgGzKVaXCEsSle

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks