Overview

overview

10

Static

static

3

082b412dcd...18.exe

windows7-x64

10

082b412dcd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    082b412dcd9df1e3aa2814bf0e833490_JaffaCakes118

  • Size

    380KB

  • Sample

    240620-vw5njatapj

  • MD5

    082b412dcd9df1e3aa2814bf0e833490

  • SHA1

    0b70d0f800a9567619ca44a11142a9f80fd04906

  • SHA256

    3b002fb95e6c81b380ca991f81e63f2792c775a5ce9b778aa9b8a44163646924

  • SHA512

    a41df2324cc0d3d8ac7b5e9bd2006709dea9f1bcf0f74923ef35266bcb41770a67b17c095447255351b4f034866ccad429b686b5f547d8157c587bb71c1e339c

  • SSDEEP

    6144:5hE5fK1Zc/jWhvd0yTN8jT0M1zWyjYd/dm:PERKQeV0Ce0IzWfc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      082b412dcd9df1e3aa2814bf0e833490_JaffaCakes118

    • Size

      380KB

    • MD5

      082b412dcd9df1e3aa2814bf0e833490

    • SHA1

      0b70d0f800a9567619ca44a11142a9f80fd04906

    • SHA256

      3b002fb95e6c81b380ca991f81e63f2792c775a5ce9b778aa9b8a44163646924

    • SHA512

      a41df2324cc0d3d8ac7b5e9bd2006709dea9f1bcf0f74923ef35266bcb41770a67b17c095447255351b4f034866ccad429b686b5f547d8157c587bb71c1e339c

    • SSDEEP

      6144:5hE5fK1Zc/jWhvd0yTN8jT0M1zWyjYd/dm:PERKQeV0Ce0IzWfc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks