Overview

overview

10

Static

static

3

2b7ed53e20...18.exe

windows7-x64

10

2b7ed53e20...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2b7ed53e2051bf0dc0313ca1c1da710d_JaffaCakes118

  • Size

    228KB

  • Sample

    240708-je6cys1dkc

  • MD5

    2b7ed53e2051bf0dc0313ca1c1da710d

  • SHA1

    86ee6bd94be0bf738fab6c07b99138bd9ee961ad

  • SHA256

    79d7edf6a4fb7ef8cac5a0ec261db8cea267208220bfdf9a831d7fb907467be3

  • SHA512

    df87f10b756925cf6a7435dada00fc29aec7d6cb7c34aaaa00ac06617a685ebeff83aa532157e01a54d61c8114a82d74abd146ed3e315b4ea430d252667a5a65

  • SSDEEP

    6144:sl9WiFR6zJ1IFZ8hQJUnjpQkRw4CQvoscWkpRQdHrts25l:sl9Wi+zJ1IFehQs0jpRQdHry2

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2b7ed53e2051bf0dc0313ca1c1da710d_JaffaCakes118

    • Size

      228KB

    • MD5

      2b7ed53e2051bf0dc0313ca1c1da710d

    • SHA1

      86ee6bd94be0bf738fab6c07b99138bd9ee961ad

    • SHA256

      79d7edf6a4fb7ef8cac5a0ec261db8cea267208220bfdf9a831d7fb907467be3

    • SHA512

      df87f10b756925cf6a7435dada00fc29aec7d6cb7c34aaaa00ac06617a685ebeff83aa532157e01a54d61c8114a82d74abd146ed3e315b4ea430d252667a5a65

    • SSDEEP

      6144:sl9WiFR6zJ1IFZ8hQJUnjpQkRw4CQvoscWkpRQdHrts25l:sl9Wi+zJ1IFehQs0jpRQdHry2

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks