Overview

overview

10

Static

static

3

0a448064a2...18.exe

windows7-x64

10

0a448064a2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0a448064a248ca782eb801df6056f8ad_JaffaCakes118

  • Size

    148KB

  • Sample

    240624-xlkxgsxgld

  • MD5

    0a448064a248ca782eb801df6056f8ad

  • SHA1

    7ff677aa547cd50a69501b83710f812fed7d3680

  • SHA256

    fed352802d177449399d4d4425d8be4d70ea7e9a8077d922b04af297482a0e14

  • SHA512

    577e147a55b395c6bd47d98cfbbab3973597c908a05ab9fe8793eda339bab4cd2ff48f2f1eadef1d013d89d907b9d13c5b45deff4bc55d71ef1a0ddad91cbe04

  • SSDEEP

    3072:/iF4Qh4mRpDGq7At/yRWr2wA36nbMUq8hFOdhIk4oQZiEEt:KFDh96F90Wf7nJPwdzWU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0a448064a248ca782eb801df6056f8ad_JaffaCakes118

    • Size

      148KB

    • MD5

      0a448064a248ca782eb801df6056f8ad

    • SHA1

      7ff677aa547cd50a69501b83710f812fed7d3680

    • SHA256

      fed352802d177449399d4d4425d8be4d70ea7e9a8077d922b04af297482a0e14

    • SHA512

      577e147a55b395c6bd47d98cfbbab3973597c908a05ab9fe8793eda339bab4cd2ff48f2f1eadef1d013d89d907b9d13c5b45deff4bc55d71ef1a0ddad91cbe04

    • SSDEEP

      3072:/iF4Qh4mRpDGq7At/yRWr2wA36nbMUq8hFOdhIk4oQZiEEt:KFDh96F90Wf7nJPwdzWU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks