Overview

overview

10

Static

static

3

2888edc64c...18.exe

windows7-x64

10

2888edc64c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2888edc64ce536cea3c2bae12d923f2d_JaffaCakes118

  • Size

    280KB

  • Sample

    240706-r5jkwa1epq

  • MD5

    2888edc64ce536cea3c2bae12d923f2d

  • SHA1

    b0f2642058fcca842e9579160e41aa57ee915df8

  • SHA256

    0ed9bae73b62dd21cf88f81a92267f6b244bcd128716d2b7bab34d941ad52740

  • SHA512

    c4e878ae03519144d8a9d20dabf95639eec5c13b477bd842e51571ceee6ed63d7f3a16f4a131e7cd4d3a2eeee5d41dd9c43c212b5bc607102b9b5f0b31febc58

  • SSDEEP

    6144:SI50IpydVsZyxyK5R8GYKi1Xfvs1tzH51t+ewSReXNX/:T0uydfiebOv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2888edc64ce536cea3c2bae12d923f2d_JaffaCakes118

    • Size

      280KB

    • MD5

      2888edc64ce536cea3c2bae12d923f2d

    • SHA1

      b0f2642058fcca842e9579160e41aa57ee915df8

    • SHA256

      0ed9bae73b62dd21cf88f81a92267f6b244bcd128716d2b7bab34d941ad52740

    • SHA512

      c4e878ae03519144d8a9d20dabf95639eec5c13b477bd842e51571ceee6ed63d7f3a16f4a131e7cd4d3a2eeee5d41dd9c43c212b5bc607102b9b5f0b31febc58

    • SSDEEP

      6144:SI50IpydVsZyxyK5R8GYKi1Xfvs1tzH51t+ewSReXNX/:T0uydfiebOv

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks