Overview

overview

10

Static

static

3

27dd5332e2...18.exe

windows7-x64

10

27dd5332e2...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    27dd5332e23405037901fe3f2eacb42b_JaffaCakes118

  • Size

    192KB

  • Sample

    240706-j5xhqsvbla

  • MD5

    27dd5332e23405037901fe3f2eacb42b

  • SHA1

    c6ab48413ac087fe646fababb58869e3f24c5ea4

  • SHA256

    2a0fea106bf01b99ad9e8a1df30c3a13ca4d31bda4cd796ccd1ff15232adf7d0

  • SHA512

    e115443bc27328ab71ecf1d60ddfd2644df2674b05c984e834498d1ede3a4cb9049e43f0907c7b58ca13fd4bfd92de34dba7b934b22f19aaf61cea8498b0faca

  • SSDEEP

    1536:TCc22OaXaaaaat031AdQWB5kCFrWszRUOHFlQhzyLwVKftfVBiZHAPloFp5A2mbd:BOiW3kCFrWsF2eLbqx2394sUhC

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      27dd5332e23405037901fe3f2eacb42b_JaffaCakes118

    • Size

      192KB

    • MD5

      27dd5332e23405037901fe3f2eacb42b

    • SHA1

      c6ab48413ac087fe646fababb58869e3f24c5ea4

    • SHA256

      2a0fea106bf01b99ad9e8a1df30c3a13ca4d31bda4cd796ccd1ff15232adf7d0

    • SHA512

      e115443bc27328ab71ecf1d60ddfd2644df2674b05c984e834498d1ede3a4cb9049e43f0907c7b58ca13fd4bfd92de34dba7b934b22f19aaf61cea8498b0faca

    • SSDEEP

      1536:TCc22OaXaaaaat031AdQWB5kCFrWszRUOHFlQhzyLwVKftfVBiZHAPloFp5A2mbd:BOiW3kCFrWsF2eLbqx2394sUhC

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks