Overview

overview

10

Static

static

3

2562fba8bb...18.exe

windows7-x64

10

2562fba8bb...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2562fba8bbb66da025e608637c2dd77c_JaffaCakes118

  • Size

    120KB

  • Sample

    240704-k33seatcqp

  • MD5

    2562fba8bbb66da025e608637c2dd77c

  • SHA1

    f4683d735bd9afe6086ebfae5b48aac52aa61768

  • SHA256

    cfc66015920e094eae94f0bb1cd9de73af7afbbe247be4e42c9ff25366a6b8c1

  • SHA512

    8ac831e28e7362128c9fb0df17af1b2ebd1af44e4da2610aa959f64720773db6f89c3729a00428fd10feea48b2d8e7322f8f596c2ccbd530d3766114528e55f3

  • SSDEEP

    1536:J6FCFUfeS6ViXkaXGE2Mtf9oUrUQKiQg9F5tkV7pjuX5e6wTeU/60hQHy4ktoD:eCQetVskW2MtF3lV9qThayoD

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2562fba8bbb66da025e608637c2dd77c_JaffaCakes118

    • Size

      120KB

    • MD5

      2562fba8bbb66da025e608637c2dd77c

    • SHA1

      f4683d735bd9afe6086ebfae5b48aac52aa61768

    • SHA256

      cfc66015920e094eae94f0bb1cd9de73af7afbbe247be4e42c9ff25366a6b8c1

    • SHA512

      8ac831e28e7362128c9fb0df17af1b2ebd1af44e4da2610aa959f64720773db6f89c3729a00428fd10feea48b2d8e7322f8f596c2ccbd530d3766114528e55f3

    • SSDEEP

      1536:J6FCFUfeS6ViXkaXGE2Mtf9oUrUQKiQg9F5tkV7pjuX5e6wTeU/60hQHy4ktoD:eCQetVskW2MtF3lV9qThayoD

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks