Overview

overview

10

Static

static

3

0b870eee00...18.exe

windows7-x64

10

0b870eee00...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b870eee00fc33b74a6e676f78ba7ff7_JaffaCakes118

  • Size

    216KB

  • Sample

    240625-assvcatdrl

  • MD5

    0b870eee00fc33b74a6e676f78ba7ff7

  • SHA1

    286faf0b09c3bd1164dd4c0665785180041ca19a

  • SHA256

    e2c1aa13ef3875231d077dbb96ed30308e90e143c6d2ecb97700333132e9e790

  • SHA512

    b6080aa438eb2f6869d01bfb3429312102e51b1c323c87ea5111e7ba2377046721b70f3a93319021c6934c407d405d7e4bfe6a9adf387218a55050a01446cabc

  • SSDEEP

    3072:+IXGKxi5xxe705cmpH8ijBcS6iS/bO40nN9k+s7EeHiAxIbYpdn:+I2VDEHmpcyWX3/640N9kLjma

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0b870eee00fc33b74a6e676f78ba7ff7_JaffaCakes118

    • Size

      216KB

    • MD5

      0b870eee00fc33b74a6e676f78ba7ff7

    • SHA1

      286faf0b09c3bd1164dd4c0665785180041ca19a

    • SHA256

      e2c1aa13ef3875231d077dbb96ed30308e90e143c6d2ecb97700333132e9e790

    • SHA512

      b6080aa438eb2f6869d01bfb3429312102e51b1c323c87ea5111e7ba2377046721b70f3a93319021c6934c407d405d7e4bfe6a9adf387218a55050a01446cabc

    • SSDEEP

      3072:+IXGKxi5xxe705cmpH8ijBcS6iS/bO40nN9k+s7EeHiAxIbYpdn:+I2VDEHmpcyWX3/640N9kLjma

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks