Overview

overview

10

Static

static

3

22c98fa0c7...18.exe

windows7-x64

10

22c98fa0c7...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    22c98fa0c79f2ab3b9a63de388519110_JaffaCakes118

  • Size

    116KB

  • Sample

    240703-sh6ybswakm

  • MD5

    22c98fa0c79f2ab3b9a63de388519110

  • SHA1

    9913ee3d6279aa9cfb752e25842aa0e0b42b8a32

  • SHA256

    7d88e0c6586db51636eeb08200e1208289c1beffd9bc6eb9de8fca9acdec9246

  • SHA512

    967d02d4839596747486b1c3f5b1aa646d060749eef0bb7bce143d570e5bd00a66e055457ab64bcf17f11312d9e1ebbb4f43af6ccbc84725be18136aaa2e3d68

  • SSDEEP

    1536:uqpxo6++ZA6N8Kw6KBOIW4Z8HO1Zwt0f4HeDUEdMOPy9sbgNswo7JaSh:Rpq+ZzfIr1ZNDUEdNwQj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      22c98fa0c79f2ab3b9a63de388519110_JaffaCakes118

    • Size

      116KB

    • MD5

      22c98fa0c79f2ab3b9a63de388519110

    • SHA1

      9913ee3d6279aa9cfb752e25842aa0e0b42b8a32

    • SHA256

      7d88e0c6586db51636eeb08200e1208289c1beffd9bc6eb9de8fca9acdec9246

    • SHA512

      967d02d4839596747486b1c3f5b1aa646d060749eef0bb7bce143d570e5bd00a66e055457ab64bcf17f11312d9e1ebbb4f43af6ccbc84725be18136aaa2e3d68

    • SSDEEP

      1536:uqpxo6++ZA6N8Kw6KBOIW4Z8HO1Zwt0f4HeDUEdMOPy9sbgNswo7JaSh:Rpq+ZzfIr1ZNDUEdNwQj

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks