Overview

overview

10

Static

static

3

2b22582e7a...18.exe

windows7-x64

10

2b22582e7a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2b22582e7a1387cd7ac75e214049886e_JaffaCakes118

  • Size

    160KB

  • Sample

    240708-f4xwbsvaqm

  • MD5

    2b22582e7a1387cd7ac75e214049886e

  • SHA1

    01daba3b01ba182f549e28cf9b11afda975e56e8

  • SHA256

    4a3b8b3cc5c78af971470b45c4e49a7dbf01af80039b7c7db6f6c2913994e235

  • SHA512

    35065d53c71c95ae6843567f4c763c0f87e80719beb3458c357845b002a72f2213b3af7271abcec9f0671d8444bd56970dbcb34f3e31950f9f13b2fa92179d47

  • SSDEEP

    3072:Ga5Xf+Dxj95Fbr2IsJ03CwLYwR49hPLd3BzK02Swq4lV34oQZiEh8:z5v+DbbrTw03rLlR4PLnh7w1rZWM

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2b22582e7a1387cd7ac75e214049886e_JaffaCakes118

    • Size

      160KB

    • MD5

      2b22582e7a1387cd7ac75e214049886e

    • SHA1

      01daba3b01ba182f549e28cf9b11afda975e56e8

    • SHA256

      4a3b8b3cc5c78af971470b45c4e49a7dbf01af80039b7c7db6f6c2913994e235

    • SHA512

      35065d53c71c95ae6843567f4c763c0f87e80719beb3458c357845b002a72f2213b3af7271abcec9f0671d8444bd56970dbcb34f3e31950f9f13b2fa92179d47

    • SSDEEP

      3072:Ga5Xf+Dxj95Fbr2IsJ03CwLYwR49hPLd3BzK02Swq4lV34oQZiEh8:z5v+DbbrTw03rLlR4PLnh7w1rZWM

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks