Overview

overview

10

Static

static

3

2adec20808...18.exe

windows7-x64

10

2adec20808...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2adec20808356d733bc92467cc63706b_JaffaCakes118

  • Size

    124KB

  • Sample

    240708-ebf7fatajf

  • MD5

    2adec20808356d733bc92467cc63706b

  • SHA1

    545ed431a11123813150b09aa4c3e2465ca86d51

  • SHA256

    604780ec2841e6790a2fd288ad04f36d55974d46d99e10ed25861b574e801f6f

  • SHA512

    8e75a4d86aaee8c9a3469d8f6de4e5df03ec9a41bab84bf1b0a6233ff56f58e0f1c1973b4a1b316f672ac0f2c841f2029dfb33fac2e6dd8d54f86873a20b3340

  • SSDEEP

    1536:TwEFU4wRbouBxLDtVdHa27J14lWxporZ45i8NeG0h/l:8EFU4wRbokLt6gJ1uPt45yt

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2adec20808356d733bc92467cc63706b_JaffaCakes118

    • Size

      124KB

    • MD5

      2adec20808356d733bc92467cc63706b

    • SHA1

      545ed431a11123813150b09aa4c3e2465ca86d51

    • SHA256

      604780ec2841e6790a2fd288ad04f36d55974d46d99e10ed25861b574e801f6f

    • SHA512

      8e75a4d86aaee8c9a3469d8f6de4e5df03ec9a41bab84bf1b0a6233ff56f58e0f1c1973b4a1b316f672ac0f2c841f2029dfb33fac2e6dd8d54f86873a20b3340

    • SSDEEP

      1536:TwEFU4wRbouBxLDtVdHa27J14lWxporZ45i8NeG0h/l:8EFU4wRbokLt6gJ1uPt45yt

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks