Overview

overview

10

Static

static

3

18cf017e75...18.exe

windows7-x64

10

18cf017e75...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    18cf017e7534931f109ba8a6ca13e0c9_JaffaCakes118

  • Size

    96KB

  • Sample

    240628-fbejaavamm

  • MD5

    18cf017e7534931f109ba8a6ca13e0c9

  • SHA1

    ce72cf5d833d69a3326a9e8d62c6059822df8205

  • SHA256

    10e403dc7c468c00665cb77509815a5ca8b55181f30fd89cb481441d8b50fcfe

  • SHA512

    57d796d235e44de5c518408b8838488c35e37c0ed01d15a8774a0c8c297f6852a60342bc105149df88f684f08494bb8b0e27ef3fee7ab864baeaf210486dd703

  • SSDEEP

    1536:1VQBHGf6cO/hQBvkGulSc16l6u+NMMl/KlYv1Tq5ThFQNIjnZq:SNhQ+lu8CFFQCns

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      18cf017e7534931f109ba8a6ca13e0c9_JaffaCakes118

    • Size

      96KB

    • MD5

      18cf017e7534931f109ba8a6ca13e0c9

    • SHA1

      ce72cf5d833d69a3326a9e8d62c6059822df8205

    • SHA256

      10e403dc7c468c00665cb77509815a5ca8b55181f30fd89cb481441d8b50fcfe

    • SHA512

      57d796d235e44de5c518408b8838488c35e37c0ed01d15a8774a0c8c297f6852a60342bc105149df88f684f08494bb8b0e27ef3fee7ab864baeaf210486dd703

    • SSDEEP

      1536:1VQBHGf6cO/hQBvkGulSc16l6u+NMMl/KlYv1Tq5ThFQNIjnZq:SNhQ+lu8CFFQCns

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks