Overview

overview

10

Static

static

3

28ae87f7f5...18.exe

windows7-x64

10

28ae87f7f5...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    28ae87f7f59309f865834ae7444a527a_JaffaCakes118

  • Size

    124KB

  • Sample

    240706-s2tgcatanl

  • MD5

    28ae87f7f59309f865834ae7444a527a

  • SHA1

    a58d6a57f736506e14b5381cf5e957a4eaff9828

  • SHA256

    62852996b29b33dd7f2be67fc55f87196104c293f7ef14d19295eb6e20b14ee8

  • SHA512

    c1cd9d36e39668f5dee7f05591dd617f9f9b8fc1d65664ffbf136971fad18e59deef06f2c5e7213301dd6c5dd52dce9aca4fc9eb4f37f21fb50fbe42c420b15b

  • SSDEEP

    3072:ICosBK3vXvOG2RdYjH08qdLxilMiyfwAfGxMw9:5osBK3vXWG4mzQLxilMiyfwAfGx

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      28ae87f7f59309f865834ae7444a527a_JaffaCakes118

    • Size

      124KB

    • MD5

      28ae87f7f59309f865834ae7444a527a

    • SHA1

      a58d6a57f736506e14b5381cf5e957a4eaff9828

    • SHA256

      62852996b29b33dd7f2be67fc55f87196104c293f7ef14d19295eb6e20b14ee8

    • SHA512

      c1cd9d36e39668f5dee7f05591dd617f9f9b8fc1d65664ffbf136971fad18e59deef06f2c5e7213301dd6c5dd52dce9aca4fc9eb4f37f21fb50fbe42c420b15b

    • SSDEEP

      3072:ICosBK3vXvOG2RdYjH08qdLxilMiyfwAfGxMw9:5osBK3vXWG4mzQLxilMiyfwAfGx

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks