Overview

overview

10

Static

static

3

1758eeab89...18.exe

windows7-x64

10

1758eeab89...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1758eeab8907cdcf91597a9a8e70f347_JaffaCakes118

  • Size

    200KB

  • Sample

    240627-ytmxgsyaje

  • MD5

    1758eeab8907cdcf91597a9a8e70f347

  • SHA1

    5d165aad99e4eb1054b4b555f70b3594f25ca07d

  • SHA256

    4ac19ce39d08a069477a4d818f4c74045dc968b0e44c3dc665ccd290cec36e56

  • SHA512

    435f4161c67e1e65a78938e4a09ad7a9e40315f92449e9e4ce91ec565385acf1ebc62e3c046d7873d7755bb474d1a94c167ec3d7e2808fbd95c4413a886fbe15

  • SSDEEP

    3072:eUGV60tQ9nLHbB9WHCS0AgTlhsp3mWRJe:p4QxL7B9WHK9Jhsp3vA

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1758eeab8907cdcf91597a9a8e70f347_JaffaCakes118

    • Size

      200KB

    • MD5

      1758eeab8907cdcf91597a9a8e70f347

    • SHA1

      5d165aad99e4eb1054b4b555f70b3594f25ca07d

    • SHA256

      4ac19ce39d08a069477a4d818f4c74045dc968b0e44c3dc665ccd290cec36e56

    • SHA512

      435f4161c67e1e65a78938e4a09ad7a9e40315f92449e9e4ce91ec565385acf1ebc62e3c046d7873d7755bb474d1a94c167ec3d7e2808fbd95c4413a886fbe15

    • SSDEEP

      3072:eUGV60tQ9nLHbB9WHCS0AgTlhsp3mWRJe:p4QxL7B9WHK9Jhsp3vA

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks