Overview

overview

10

Static

static

3

1c1e6c64a2...18.exe

windows7-x64

10

1c1e6c64a2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c1e6c64a2860e3b1a3e7c01341f77ca_JaffaCakes118

  • Size

    220KB

  • Sample

    240701-xhjv1stdmc

  • MD5

    1c1e6c64a2860e3b1a3e7c01341f77ca

  • SHA1

    0a4cdb173310ea82add8262a38bf2ec99f6dba47

  • SHA256

    6a7a4a52b3b6128b68609e3282dc16ce7c9c252b01859a055158b8cd7f73082c

  • SHA512

    2e16f30866e01c7e8f2a896e3c6ed4d87364e5950fc52029a3610158b333a13c994bcff04488738a05c1b05989a4245f9bea9f18a0aa801d6a4ce113298a5872

  • SSDEEP

    3072:llR1SrvkY8YUL4qx9RIHgil3UuhSa3U3dD8d6Oy+MIrnj3JjND:B1Sbkx15x9SHVeOjf

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      1c1e6c64a2860e3b1a3e7c01341f77ca_JaffaCakes118

    • Size

      220KB

    • MD5

      1c1e6c64a2860e3b1a3e7c01341f77ca

    • SHA1

      0a4cdb173310ea82add8262a38bf2ec99f6dba47

    • SHA256

      6a7a4a52b3b6128b68609e3282dc16ce7c9c252b01859a055158b8cd7f73082c

    • SHA512

      2e16f30866e01c7e8f2a896e3c6ed4d87364e5950fc52029a3610158b333a13c994bcff04488738a05c1b05989a4245f9bea9f18a0aa801d6a4ce113298a5872

    • SSDEEP

      3072:llR1SrvkY8YUL4qx9RIHgil3UuhSa3U3dD8d6Oy+MIrnj3JjND:B1Sbkx15x9SHVeOjf

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks