Overview

overview

10

Static

static

3

28701d5d4f...18.exe

windows7-x64

10

28701d5d4f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    28701d5d4fa54bb6ebb5bd87b29eeb96_JaffaCakes118

  • Size

    220KB

  • Sample

    240706-rhey6szeqj

  • MD5

    28701d5d4fa54bb6ebb5bd87b29eeb96

  • SHA1

    a1cdb7c4b32b5151578e6ced059a560ecdce6341

  • SHA256

    db29652f161c260b317b1c8d4161c786470915b8f09549ae345c98864703fee2

  • SHA512

    bab77ad95e21b7f736d79466a2d78dc0e10b66c0905551d3bee1238b3474a4c5b8065626937dc6a4b191f151759d0560bc6f106a60ac286b54550c418b07d586

  • SSDEEP

    3072:kDR1Sr8kY8YUL4qx9RIHgil3UuhSa3U3dD8d6Oy+MIrnj3JjNw:K1SAkx15x9SHVeOjf

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      28701d5d4fa54bb6ebb5bd87b29eeb96_JaffaCakes118

    • Size

      220KB

    • MD5

      28701d5d4fa54bb6ebb5bd87b29eeb96

    • SHA1

      a1cdb7c4b32b5151578e6ced059a560ecdce6341

    • SHA256

      db29652f161c260b317b1c8d4161c786470915b8f09549ae345c98864703fee2

    • SHA512

      bab77ad95e21b7f736d79466a2d78dc0e10b66c0905551d3bee1238b3474a4c5b8065626937dc6a4b191f151759d0560bc6f106a60ac286b54550c418b07d586

    • SSDEEP

      3072:kDR1Sr8kY8YUL4qx9RIHgil3UuhSa3U3dD8d6Oy+MIrnj3JjNw:K1SAkx15x9SHVeOjf

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks