Overview

overview

10

Static

static

3

0c818b7802...18.exe

windows7-x64

10

0c818b7802...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c818b7802cfb0e6842e892649c98b2b_JaffaCakes118

  • Size

    228KB

  • Sample

    240625-eys5hstdkn

  • MD5

    0c818b7802cfb0e6842e892649c98b2b

  • SHA1

    a1a30b3c2575801a0404d06b9e150b7d3e89c602

  • SHA256

    49adc5f0a0e095d2d5fcdef0b51b12b230620ae437e224e1b994b539e4543074

  • SHA512

    8127bb58efc7d3db2f74bc382460001264cd25a43b37f19819d8aa67255863e5995d97926032b8f8f0da6ba93277c94dc5c7f92a077038997e8530bf3672b398

  • SSDEEP

    6144:cKERu3dwqsNy5ibpNjl4EqxF6snji81RUinKIC8:ZE6dQxl

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0c818b7802cfb0e6842e892649c98b2b_JaffaCakes118

    • Size

      228KB

    • MD5

      0c818b7802cfb0e6842e892649c98b2b

    • SHA1

      a1a30b3c2575801a0404d06b9e150b7d3e89c602

    • SHA256

      49adc5f0a0e095d2d5fcdef0b51b12b230620ae437e224e1b994b539e4543074

    • SHA512

      8127bb58efc7d3db2f74bc382460001264cd25a43b37f19819d8aa67255863e5995d97926032b8f8f0da6ba93277c94dc5c7f92a077038997e8530bf3672b398

    • SSDEEP

      6144:cKERu3dwqsNy5ibpNjl4EqxF6snji81RUinKIC8:ZE6dQxl

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks