Overview

overview

10

Static

static

3

0da38a6bd5...18.exe

windows7-x64

10

0da38a6bd5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0da38a6bd5531fde96b443504f89a2eb_JaffaCakes118

  • Size

    284KB

  • Sample

    240625-lzdvjswdjn

  • MD5

    0da38a6bd5531fde96b443504f89a2eb

  • SHA1

    99a2f8b298c810fab9e49926df08ad177a8c21ad

  • SHA256

    3c54370204f8441b2cfc9b244a26ebfc76fb529e03d3bd907803fb19dbb33350

  • SHA512

    31282cd75127c8a6a3d7abf53803543df28cd36b3783dcf702b7fa53d65848ebec877e8e287b74a3035367f4a2c03ca71e7bcc20a80bf982115fc5a6717ce822

  • SSDEEP

    6144:t2Yd3FRINO5WcBzjkBP18yAYU7vKd3EUXWidJhKnvmb7/D26XgZKIQ0OfsJy2mJf:tn3fINO5WcBzjkV183Kd3EUXWidJhKn2

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0da38a6bd5531fde96b443504f89a2eb_JaffaCakes118

    • Size

      284KB

    • MD5

      0da38a6bd5531fde96b443504f89a2eb

    • SHA1

      99a2f8b298c810fab9e49926df08ad177a8c21ad

    • SHA256

      3c54370204f8441b2cfc9b244a26ebfc76fb529e03d3bd907803fb19dbb33350

    • SHA512

      31282cd75127c8a6a3d7abf53803543df28cd36b3783dcf702b7fa53d65848ebec877e8e287b74a3035367f4a2c03ca71e7bcc20a80bf982115fc5a6717ce822

    • SSDEEP

      6144:t2Yd3FRINO5WcBzjkBP18yAYU7vKd3EUXWidJhKnvmb7/D26XgZKIQ0OfsJy2mJf:tn3fINO5WcBzjkV183Kd3EUXWidJhKn2

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks