Overview

overview

10

Static

static

3

20c84bad2a...18.exe

windows7-x64

10

20c84bad2a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20c84bad2ac1bb99b11a6b4a2410f107_JaffaCakes118

  • Size

    224KB

  • Sample

    240703-c1ad3sxcnl

  • MD5

    20c84bad2ac1bb99b11a6b4a2410f107

  • SHA1

    5f6dcbe70b83345f666eba298f66071ff989c7fe

  • SHA256

    d1c4f198e5c5da91834f564ee7b330bfdb8b468e2aa75af3480fba4cab023786

  • SHA512

    653a05c2ad8c2a1d52c72e0802b62d2dd6f03bc2d7bae236fc24d0fee421c8c7d12bead549f1033b4cd344710af34daba3066f2cf976efa90337a265aca00793

  • SSDEEP

    3072:28GPq3sZ5qbLj1w+A3W66NYa7CgPCmHV1BdHDYqzUnQUodlD:2Hqoqvj1BA76HCgPCmHV1BdHDYoUS

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      20c84bad2ac1bb99b11a6b4a2410f107_JaffaCakes118

    • Size

      224KB

    • MD5

      20c84bad2ac1bb99b11a6b4a2410f107

    • SHA1

      5f6dcbe70b83345f666eba298f66071ff989c7fe

    • SHA256

      d1c4f198e5c5da91834f564ee7b330bfdb8b468e2aa75af3480fba4cab023786

    • SHA512

      653a05c2ad8c2a1d52c72e0802b62d2dd6f03bc2d7bae236fc24d0fee421c8c7d12bead549f1033b4cd344710af34daba3066f2cf976efa90337a265aca00793

    • SSDEEP

      3072:28GPq3sZ5qbLj1w+A3W66NYa7CgPCmHV1BdHDYqzUnQUodlD:2Hqoqvj1BA76HCgPCmHV1BdHDYoUS

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks