Overview

overview

10

Static

static

3

1ad085052b...18.exe

windows7-x64

10

1ad085052b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ad085052b045804471fc9204c576685_JaffaCakes118

  • Size

    100KB

  • Sample

    240701-lqny6axgll

  • MD5

    1ad085052b045804471fc9204c576685

  • SHA1

    a8535d23f3f954fd258c4c6e7747f05a281bc3c2

  • SHA256

    302d30c13855a0ce85e32a8b52cc4f8dcdfbe6d0d0afb3a06e770916eb19907c

  • SHA512

    c89fa0e0a37cec6f26d2717418df49460e6c7c359eb23c888bdbc2f19315d0885cd4d04770ddf530c5f5e3ef3896271026ffe2f89cb49e9084255fe0cb5a94fe

  • SSDEEP

    1536:F8tGB82NTzw+pMGAc4ohrPXo+73Rez8b0Sy2NIjnZMd:Tw+wurPX7C2Cned

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1ad085052b045804471fc9204c576685_JaffaCakes118

    • Size

      100KB

    • MD5

      1ad085052b045804471fc9204c576685

    • SHA1

      a8535d23f3f954fd258c4c6e7747f05a281bc3c2

    • SHA256

      302d30c13855a0ce85e32a8b52cc4f8dcdfbe6d0d0afb3a06e770916eb19907c

    • SHA512

      c89fa0e0a37cec6f26d2717418df49460e6c7c359eb23c888bdbc2f19315d0885cd4d04770ddf530c5f5e3ef3896271026ffe2f89cb49e9084255fe0cb5a94fe

    • SSDEEP

      1536:F8tGB82NTzw+pMGAc4ohrPXo+73Rez8b0Sy2NIjnZMd:Tw+wurPX7C2Cned

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks