Overview

overview

10

Static

static

3

14eada58a4...18.exe

windows7-x64

10

14eada58a4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14eada58a4a46b759d22099645b63612_JaffaCakes118

  • Size

    100KB

  • Sample

    240627-gp7mnayaqn

  • MD5

    14eada58a4a46b759d22099645b63612

  • SHA1

    4f24710fc0e4a06d169220b5804f113550489045

  • SHA256

    d74ec7a707789fccf68613e0c1b52b7005ad3741c0d1040a62737138dcc24c43

  • SHA512

    1f0f76d153bcf3b2461a94b06c5bc3581dcff22911414a2232b3282c7dbf69e7e67365be15c4f6fdb13bcde6a362abe0483e2b188150369ca8bec0ce94d1487b

  • SSDEEP

    1536:ptH0cLiBnrzrO9+dGrNsjmJzNuKuFr1u5BAQbCcIl:/iBzO9+VjOtI

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      14eada58a4a46b759d22099645b63612_JaffaCakes118

    • Size

      100KB

    • MD5

      14eada58a4a46b759d22099645b63612

    • SHA1

      4f24710fc0e4a06d169220b5804f113550489045

    • SHA256

      d74ec7a707789fccf68613e0c1b52b7005ad3741c0d1040a62737138dcc24c43

    • SHA512

      1f0f76d153bcf3b2461a94b06c5bc3581dcff22911414a2232b3282c7dbf69e7e67365be15c4f6fdb13bcde6a362abe0483e2b188150369ca8bec0ce94d1487b

    • SSDEEP

      1536:ptH0cLiBnrzrO9+dGrNsjmJzNuKuFr1u5BAQbCcIl:/iBzO9+VjOtI

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks