Overview

overview

10

Static

static

3

08322e8bc0...18.exe

windows7-x64

10

08322e8bc0...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    08322e8bc09cabadc367b6a98e1ab80a_JaffaCakes118

  • Size

    228KB

  • Sample

    240624-neg3kssgqk

  • MD5

    08322e8bc09cabadc367b6a98e1ab80a

  • SHA1

    93fcef22068420b6966830266fad9df819f25179

  • SHA256

    c1047c0f92c8feff2797608d57129399a0368994086c2ae4d204ce347b34d24f

  • SHA512

    0766096f7da392182caf2c90e5275bbf5658ffda2685f95d086996195bc0009b6e8695397287b83e4d27911b7e8c4d8db95ea6b75c6bcd1238d5fd0595056b44

  • SSDEEP

    6144:/K/z3dwqsNy5ibpNjl4EqxF6snji81RUinKICT:C/zdQxlT

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      08322e8bc09cabadc367b6a98e1ab80a_JaffaCakes118

    • Size

      228KB

    • MD5

      08322e8bc09cabadc367b6a98e1ab80a

    • SHA1

      93fcef22068420b6966830266fad9df819f25179

    • SHA256

      c1047c0f92c8feff2797608d57129399a0368994086c2ae4d204ce347b34d24f

    • SHA512

      0766096f7da392182caf2c90e5275bbf5658ffda2685f95d086996195bc0009b6e8695397287b83e4d27911b7e8c4d8db95ea6b75c6bcd1238d5fd0595056b44

    • SSDEEP

      6144:/K/z3dwqsNy5ibpNjl4EqxF6snji81RUinKICT:C/zdQxlT

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks