Overview

overview

10

Static

static

3

1b48ab33a0...18.exe

windows7-x64

10

1b48ab33a0...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1b48ab33a0e239891360080ed8e15eff_JaffaCakes118

  • Size

    272KB

  • Sample

    240701-pj2s8a1fje

  • MD5

    1b48ab33a0e239891360080ed8e15eff

  • SHA1

    d6def983b48027e1303f432bd0f62ac4395186ff

  • SHA256

    6127948f0a070bf5125b166c6a54bef362a73288340b0618184428c57c092f49

  • SHA512

    cfee9941816eb3e502f96c5fef5f589395fcf8632bed71a760c68e135ba8a32f38abc122e94718eec73f9cf3b2fb55dbecc1a90d316a9c38bd1fb3c166f8588e

  • SSDEEP

    6144:MjFsFrymU8iHOADP0UfV3SHWPIxXZgO+VeR8RUl:xFXUfJSj+R

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1b48ab33a0e239891360080ed8e15eff_JaffaCakes118

    • Size

      272KB

    • MD5

      1b48ab33a0e239891360080ed8e15eff

    • SHA1

      d6def983b48027e1303f432bd0f62ac4395186ff

    • SHA256

      6127948f0a070bf5125b166c6a54bef362a73288340b0618184428c57c092f49

    • SHA512

      cfee9941816eb3e502f96c5fef5f589395fcf8632bed71a760c68e135ba8a32f38abc122e94718eec73f9cf3b2fb55dbecc1a90d316a9c38bd1fb3c166f8588e

    • SSDEEP

      6144:MjFsFrymU8iHOADP0UfV3SHWPIxXZgO+VeR8RUl:xFXUfJSj+R

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks