Overview

overview

10

Static

static

3

266292080b...18.exe

windows7-x64

10

266292080b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    266292080bbba5b1f2e03d0a82426ac3_JaffaCakes118

  • Size

    136KB

  • Sample

    240704-1xr2qatenf

  • MD5

    266292080bbba5b1f2e03d0a82426ac3

  • SHA1

    29dff12cd9ae389d1328d7d47437deebd564092a

  • SHA256

    eb0c944e1325de5859e5a2bd08f1c2e4b1b55b36daff121d1702dec931c2fc06

  • SHA512

    855b6fffde48be31f7df7f394e3cdd84a70938abb892f1a1ce55c5e3018e2252a564e34183fa95057a42f00dbf9cd01348d322729ee4f5661077458bdea34519

  • SSDEEP

    1536:NhmqXOTy6npK9x5WPjeATvbtjYYVHdzqZgIYEOCozOZD:yqX8jI93WPyAdYZgI2CozAD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      266292080bbba5b1f2e03d0a82426ac3_JaffaCakes118

    • Size

      136KB

    • MD5

      266292080bbba5b1f2e03d0a82426ac3

    • SHA1

      29dff12cd9ae389d1328d7d47437deebd564092a

    • SHA256

      eb0c944e1325de5859e5a2bd08f1c2e4b1b55b36daff121d1702dec931c2fc06

    • SHA512

      855b6fffde48be31f7df7f394e3cdd84a70938abb892f1a1ce55c5e3018e2252a564e34183fa95057a42f00dbf9cd01348d322729ee4f5661077458bdea34519

    • SSDEEP

      1536:NhmqXOTy6npK9x5WPjeATvbtjYYVHdzqZgIYEOCozOZD:yqX8jI93WPyAdYZgI2CozAD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks