Overview

overview

10

Static

static

3

0fe6cbb95e...18.exe

windows7-x64

10

0fe6cbb95e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fe6cbb95e8d99cbeddb2b98c40bb6a7_JaffaCakes118

  • Size

    240KB

  • Sample

    240625-3ba77azdna

  • MD5

    0fe6cbb95e8d99cbeddb2b98c40bb6a7

  • SHA1

    9e895aae2af54bf89d71623dd82f0b4de4c42f2c

  • SHA256

    cee4e1ccf2dccd2f535a045b265f5180ac6e96ff5629ebf0d5dbd44ce5051b1c

  • SHA512

    402c599309d3a6a000b775a498050aa3cc612b8f5077451bbfec96e17f67f71623b727300beff276747ece17fc7b468bf8206f3a5d456178219adddc240aea8a

  • SSDEEP

    6144:0UJ3dwqsNwemAB0EqxF6snji81RUinKchhycSQL:1dQQJs7w

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0fe6cbb95e8d99cbeddb2b98c40bb6a7_JaffaCakes118

    • Size

      240KB

    • MD5

      0fe6cbb95e8d99cbeddb2b98c40bb6a7

    • SHA1

      9e895aae2af54bf89d71623dd82f0b4de4c42f2c

    • SHA256

      cee4e1ccf2dccd2f535a045b265f5180ac6e96ff5629ebf0d5dbd44ce5051b1c

    • SHA512

      402c599309d3a6a000b775a498050aa3cc612b8f5077451bbfec96e17f67f71623b727300beff276747ece17fc7b468bf8206f3a5d456178219adddc240aea8a

    • SSDEEP

      6144:0UJ3dwqsNwemAB0EqxF6snji81RUinKchhycSQL:1dQQJs7w

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks