Overview

overview

10

Static

static

3

2cea1e779c...18.exe

windows7-x64

10

2cea1e779c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cea1e779c8601dab1dc84304f8d5c97_JaffaCakes118

  • Size

    156KB

  • Sample

    240708-taq3ksyfld

  • MD5

    2cea1e779c8601dab1dc84304f8d5c97

  • SHA1

    83da21e11b64582f62f32a684b9e2e1c30945504

  • SHA256

    0fdcf34c431d7da13f1cca8a9c7bb92081d646c0f08b87fc0906dd8a095d8028

  • SHA512

    256b4af62246cd03373a5d23a45e3d46f8937726456c9468f7808ced8ff00bfa27c95dc19da25568900b4c3380091f48f63e2dd339d78709532788292e6f5bc6

  • SSDEEP

    3072:bvo0kvEdu3kSESulCVRgQPwU3MppI1zePMThBOWE5j4oQ:joqu3ESul9LI1zeEhEd

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2cea1e779c8601dab1dc84304f8d5c97_JaffaCakes118

    • Size

      156KB

    • MD5

      2cea1e779c8601dab1dc84304f8d5c97

    • SHA1

      83da21e11b64582f62f32a684b9e2e1c30945504

    • SHA256

      0fdcf34c431d7da13f1cca8a9c7bb92081d646c0f08b87fc0906dd8a095d8028

    • SHA512

      256b4af62246cd03373a5d23a45e3d46f8937726456c9468f7808ced8ff00bfa27c95dc19da25568900b4c3380091f48f63e2dd339d78709532788292e6f5bc6

    • SSDEEP

      3072:bvo0kvEdu3kSESulCVRgQPwU3MppI1zePMThBOWE5j4oQ:joqu3ESul9LI1zeEhEd

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks