Overview

overview

10

Static

static

3

2bd0aa185a...18.exe

windows7-x64

10

2bd0aa185a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2bd0aa185ab8d96edf9dcd5f7f916725_JaffaCakes118

  • Size

    80KB

  • Sample

    240708-ler7fasfmr

  • MD5

    2bd0aa185ab8d96edf9dcd5f7f916725

  • SHA1

    2900e1c9971cbcff86c55e86b0f4d9adf7123fcd

  • SHA256

    f92dfbc60d9784a27f7897bca3c6a43a87bb5d87d4ba1ff591f40b86b36414f8

  • SHA512

    930a883ee785a7a97b564580af5d4d0874b3d4027cc97c07b5b1d2a4c04defb1598f67b7c3633897f1a86119479b3382835d834d246003ec38ecfdf0a483f6b9

  • SSDEEP

    768:URL/eaqxW8O3NBp/pc8epC7/I1t12/y/scRH4bax/Ww5vOZrsg9:URH1NBVYkQt1ymscRH4Zw5Ssi

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2bd0aa185ab8d96edf9dcd5f7f916725_JaffaCakes118

    • Size

      80KB

    • MD5

      2bd0aa185ab8d96edf9dcd5f7f916725

    • SHA1

      2900e1c9971cbcff86c55e86b0f4d9adf7123fcd

    • SHA256

      f92dfbc60d9784a27f7897bca3c6a43a87bb5d87d4ba1ff591f40b86b36414f8

    • SHA512

      930a883ee785a7a97b564580af5d4d0874b3d4027cc97c07b5b1d2a4c04defb1598f67b7c3633897f1a86119479b3382835d834d246003ec38ecfdf0a483f6b9

    • SSDEEP

      768:URL/eaqxW8O3NBp/pc8epC7/I1t12/y/scRH4bax/Ww5vOZrsg9:URH1NBVYkQt1ymscRH4Zw5Ssi

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks