Overview

overview

10

Static

static

3

152c3a938d...18.exe

windows7-x64

10

152c3a938d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    152c3a938d882cf3d145738527311ba7_JaffaCakes118

  • Size

    135KB

  • Sample

    240627-je9qda1hkn

  • MD5

    152c3a938d882cf3d145738527311ba7

  • SHA1

    fc85bbba67fd830057655eb1991cc78feff25fef

  • SHA256

    c331b8bc49216750fe2de51354ce88605afbc4c39ffeaf39b840821f10ac6be6

  • SHA512

    852f7d52269ea96d2d0f1cd7b78a4538b2f843df1a26e3c9be79d3535b268e22561a268e8dd797d3db998b53652e4c8cd89a47a686c071ac998a5f1e2c210230

  • SSDEEP

    3072:IM3b7Gqm/1UPb1WpXVxAaGBvbNvNbNJkvmhyPQbaDTUXGIDbwKDqCtrwdAxaVTtU:H3b7O/UoIDbByGPMsMP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      152c3a938d882cf3d145738527311ba7_JaffaCakes118

    • Size

      135KB

    • MD5

      152c3a938d882cf3d145738527311ba7

    • SHA1

      fc85bbba67fd830057655eb1991cc78feff25fef

    • SHA256

      c331b8bc49216750fe2de51354ce88605afbc4c39ffeaf39b840821f10ac6be6

    • SHA512

      852f7d52269ea96d2d0f1cd7b78a4538b2f843df1a26e3c9be79d3535b268e22561a268e8dd797d3db998b53652e4c8cd89a47a686c071ac998a5f1e2c210230

    • SSDEEP

      3072:IM3b7Gqm/1UPb1WpXVxAaGBvbNvNbNJkvmhyPQbaDTUXGIDbwKDqCtrwdAxaVTtU:H3b7O/UoIDbByGPMsMP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks