Overview

overview

10

Static

static

3

070d3a2eb5...18.exe

windows7-x64

10

070d3a2eb5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    070d3a2eb54e93273a9258b6b6ec70d7_JaffaCakes118

  • Size

    240KB

  • Sample

    240624-hqn3dazbrg

  • MD5

    070d3a2eb54e93273a9258b6b6ec70d7

  • SHA1

    942a9c69fd30a385a7783c489aa770f346ade7a4

  • SHA256

    3e2b8f2aa8eb705a8dc6ad2e6306c4c369916bddee15dd9da10b3bdf4a7b2f3d

  • SHA512

    a4b15d67ddc18ec8b7effcd522655d90c4361238ccc7ccc0aa8f44259549789c2e3124bc2ea29d1261df0bf2f7a76549124af297b65a66bd4abdbe023698be3d

  • SSDEEP

    6144:jUTw3dwqsNwemAB0EqxF6snji81RUinKchhyxSz:ndQQJsIz

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      070d3a2eb54e93273a9258b6b6ec70d7_JaffaCakes118

    • Size

      240KB

    • MD5

      070d3a2eb54e93273a9258b6b6ec70d7

    • SHA1

      942a9c69fd30a385a7783c489aa770f346ade7a4

    • SHA256

      3e2b8f2aa8eb705a8dc6ad2e6306c4c369916bddee15dd9da10b3bdf4a7b2f3d

    • SHA512

      a4b15d67ddc18ec8b7effcd522655d90c4361238ccc7ccc0aa8f44259549789c2e3124bc2ea29d1261df0bf2f7a76549124af297b65a66bd4abdbe023698be3d

    • SSDEEP

      6144:jUTw3dwqsNwemAB0EqxF6snji81RUinKchhyxSz:ndQQJsIz

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks