Overview

overview

10

Static

static

3

17f1e44376...18.exe

windows7-x64

10

17f1e44376...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    17f1e443761a951d39ee00d9fb9ee94d_JaffaCakes118

  • Size

    152KB

  • Sample

    240627-3hlbqs1cnl

  • MD5

    17f1e443761a951d39ee00d9fb9ee94d

  • SHA1

    3977df63ec554d145f56212467dd1361a7b7ca0a

  • SHA256

    607f14870fda6bc4f03dfd25231ebd918355842be2d55580fb1e69cc60b27c09

  • SHA512

    f29f8b2bd637625dc9f56dbd80431c006c10c711940baca2a169d6729215f1e74a00f499fad1627835b24ce53f5986df5cb9e6734392eed33e1ca975b6edaca5

  • SSDEEP

    3072:T3jIpK9xKA9w2p4QZisLaazNiIIkyyqN4oQZiE9vOGy:T3cpKxY+1isuazgfklcWvm

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      17f1e443761a951d39ee00d9fb9ee94d_JaffaCakes118

    • Size

      152KB

    • MD5

      17f1e443761a951d39ee00d9fb9ee94d

    • SHA1

      3977df63ec554d145f56212467dd1361a7b7ca0a

    • SHA256

      607f14870fda6bc4f03dfd25231ebd918355842be2d55580fb1e69cc60b27c09

    • SHA512

      f29f8b2bd637625dc9f56dbd80431c006c10c711940baca2a169d6729215f1e74a00f499fad1627835b24ce53f5986df5cb9e6734392eed33e1ca975b6edaca5

    • SSDEEP

      3072:T3jIpK9xKA9w2p4QZisLaazNiIIkyyqN4oQZiE9vOGy:T3cpKxY+1isuazgfklcWvm

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks