Overview

overview

10

Static

static

3

1633b66be6...18.exe

windows7-x64

10

1633b66be6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1633b66be69af72e2f640e72104054ae_JaffaCakes118

  • Size

    200KB

  • Sample

    240627-qyr31awenp

  • MD5

    1633b66be69af72e2f640e72104054ae

  • SHA1

    a41f51b346a496eb5640389f4283ead7a0c0d048

  • SHA256

    356009ed470368f3e27d7a61f910df8f3133b09a5691d01229f841a10de71e41

  • SHA512

    c7d0a01aa0db1831d38d0021976daa221bb6f4f2faf99a3884708864954c98f21e542e371cc988b74dc272e59e987c4af47acc460bd5d3f149033b10c1c99bd2

  • SSDEEP

    1536:i8Kgs56RfSJ1tx1xzm4xNy3tQ9CW5EZWHakMwP9W6uXN993ZNxtFnqlGcNskVati:pg6RfSJV0tQ9nLHbB9WF478dDVBm49I

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1633b66be69af72e2f640e72104054ae_JaffaCakes118

    • Size

      200KB

    • MD5

      1633b66be69af72e2f640e72104054ae

    • SHA1

      a41f51b346a496eb5640389f4283ead7a0c0d048

    • SHA256

      356009ed470368f3e27d7a61f910df8f3133b09a5691d01229f841a10de71e41

    • SHA512

      c7d0a01aa0db1831d38d0021976daa221bb6f4f2faf99a3884708864954c98f21e542e371cc988b74dc272e59e987c4af47acc460bd5d3f149033b10c1c99bd2

    • SSDEEP

      1536:i8Kgs56RfSJ1tx1xzm4xNy3tQ9CW5EZWHakMwP9W6uXN993ZNxtFnqlGcNskVati:pg6RfSJV0tQ9nLHbB9WF478dDVBm49I

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks