Overview

overview

10

Static

static

3

2bcb2e87ef...18.exe

windows7-x64

10

2bcb2e87ef...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bcb2e87ef3b5a6733ca461a148cc67b_JaffaCakes118

  • Size

    204KB

  • Sample

    240708-lads9asdmm

  • MD5

    2bcb2e87ef3b5a6733ca461a148cc67b

  • SHA1

    b675259cf6f1ab3620a2b0ccdccf0815b21ffa40

  • SHA256

    0e1f90345b595f9b8d2f42d5c094aafbe789cd3a9642b7d6ad2f0928b8661cac

  • SHA512

    712b4c2bbedb6918d2a1bab5fee32977255350b1665f9a67023ee76d0e0ffb1eb321674528960ee9c5d5a4f8765afe97fd5a0ab95a6c6d3e35fba23416b54c3e

  • SSDEEP

    1536:uE9d9HQ4zxHwxExNy3tQ9CW5EZWHakMwP9W6uXNi9f1AWa11GBPIdRONd+w6EStU:PDHQm0tQ9nLHbB9W+k9ZJgImCHU1

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2bcb2e87ef3b5a6733ca461a148cc67b_JaffaCakes118

    • Size

      204KB

    • MD5

      2bcb2e87ef3b5a6733ca461a148cc67b

    • SHA1

      b675259cf6f1ab3620a2b0ccdccf0815b21ffa40

    • SHA256

      0e1f90345b595f9b8d2f42d5c094aafbe789cd3a9642b7d6ad2f0928b8661cac

    • SHA512

      712b4c2bbedb6918d2a1bab5fee32977255350b1665f9a67023ee76d0e0ffb1eb321674528960ee9c5d5a4f8765afe97fd5a0ab95a6c6d3e35fba23416b54c3e

    • SSDEEP

      1536:uE9d9HQ4zxHwxExNy3tQ9CW5EZWHakMwP9W6uXNi9f1AWa11GBPIdRONd+w6EStU:PDHQm0tQ9nLHbB9W+k9ZJgImCHU1

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks