Overview

overview

10

Static

static

3

256a89afbb...18.exe

windows7-x64

10

256a89afbb...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    256a89afbbe4699c228343485e1bbefc_JaffaCakes118

  • Size

    228KB

  • Sample

    240704-k9pt5aweka

  • MD5

    256a89afbbe4699c228343485e1bbefc

  • SHA1

    ac0cacf19fffb10dc6ef32da74933985907f5825

  • SHA256

    98c8da8c096a581bffdfcfcd3fa26063fb780a0242c6d431b58636ff9d445c70

  • SHA512

    ba8d0cf3938f4b9f0044bab5fba3c1f8cf9a65a91586677b75c480c683884b081bcc78216921ef8c68f83af2b0f34241cffaafe04c09fe76b9a5471fa0737518

  • SSDEEP

    6144:3K0Z3dwqsNy5ibpNjl4EqxF6snji81RUinKICur:a0VdQxle

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      256a89afbbe4699c228343485e1bbefc_JaffaCakes118

    • Size

      228KB

    • MD5

      256a89afbbe4699c228343485e1bbefc

    • SHA1

      ac0cacf19fffb10dc6ef32da74933985907f5825

    • SHA256

      98c8da8c096a581bffdfcfcd3fa26063fb780a0242c6d431b58636ff9d445c70

    • SHA512

      ba8d0cf3938f4b9f0044bab5fba3c1f8cf9a65a91586677b75c480c683884b081bcc78216921ef8c68f83af2b0f34241cffaafe04c09fe76b9a5471fa0737518

    • SSDEEP

      6144:3K0Z3dwqsNy5ibpNjl4EqxF6snji81RUinKICur:a0VdQxle

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks