Overview

overview

10

Static

static

3

184e42be96...18.exe

windows7-x64

10

184e42be96...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    184e42be961c2acb6fb56c48954a5001_JaffaCakes118

  • Size

    55KB

  • Sample

    240628-byds2swfmr

  • MD5

    184e42be961c2acb6fb56c48954a5001

  • SHA1

    3409feeda508a604f39dcc369d125fdbf2946920

  • SHA256

    6bb828120bf024708af21c1019b4adf2209e603e0bf65b003a9e893523347a14

  • SHA512

    2850fb9c0a32fe1dced4a1f7c96b53754c9200488e056070a0996025c6f6e73babbf01dc2f206606605faf5152348bce537ed05f217e769cf50c264fce4de78d

  • SSDEEP

    768:2vyoeDBPY6oubUaNNgpmliRFyXuoU9uvPMd3FfgX22qEvnc3CcKK5:2Au6hLzsRsXuXIvPMd3ej1vnc3Co5

Score
10/10
persistence

Malware Config

Targets

    • Target

      184e42be961c2acb6fb56c48954a5001_JaffaCakes118

    • Size

      55KB

    • MD5

      184e42be961c2acb6fb56c48954a5001

    • SHA1

      3409feeda508a604f39dcc369d125fdbf2946920

    • SHA256

      6bb828120bf024708af21c1019b4adf2209e603e0bf65b003a9e893523347a14

    • SHA512

      2850fb9c0a32fe1dced4a1f7c96b53754c9200488e056070a0996025c6f6e73babbf01dc2f206606605faf5152348bce537ed05f217e769cf50c264fce4de78d

    • SSDEEP

      768:2vyoeDBPY6oubUaNNgpmliRFyXuoU9uvPMd3FfgX22qEvnc3CcKK5:2Au6hLzsRsXuXIvPMd3ej1vnc3Co5

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks