Overview

overview

10

Static

static

3

24c3bd7580...18.exe

windows7-x64

10

24c3bd7580...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    24c3bd75807cad3b957d8feee18c7d2b_JaffaCakes118

  • Size

    96KB

  • Sample

    240704-fz3wsaycrf

  • MD5

    24c3bd75807cad3b957d8feee18c7d2b

  • SHA1

    39a2b175766e52f8e0c0f8553c0bc6f2525e85c4

  • SHA256

    cbf3686c355b8f7c230cded1c3af84757da54f5536088f02f6c9103e0cbc79b4

  • SHA512

    0da7928d3444b6d8ce2a07edc7de679c555eb3d9459c95b66b48f41cd715955c8a0cd455fc91cd43edeea389aa1cd3f77124c14b69adecf374b6da20182794ed

  • SSDEEP

    1536:iJQBHUf6cO/hRrkGulSc16l6u+NMMl/KlYv1Tq5ThFfNIjnZnF:z3hRUlu8CFFfCnVF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      24c3bd75807cad3b957d8feee18c7d2b_JaffaCakes118

    • Size

      96KB

    • MD5

      24c3bd75807cad3b957d8feee18c7d2b

    • SHA1

      39a2b175766e52f8e0c0f8553c0bc6f2525e85c4

    • SHA256

      cbf3686c355b8f7c230cded1c3af84757da54f5536088f02f6c9103e0cbc79b4

    • SHA512

      0da7928d3444b6d8ce2a07edc7de679c555eb3d9459c95b66b48f41cd715955c8a0cd455fc91cd43edeea389aa1cd3f77124c14b69adecf374b6da20182794ed

    • SSDEEP

      1536:iJQBHUf6cO/hRrkGulSc16l6u+NMMl/KlYv1Tq5ThFfNIjnZnF:z3hRUlu8CFFfCnVF

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks