Overview

overview

10

Static

static

3

322d9e4277...18.exe

windows7-x64

10

322d9e4277...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    322d9e4277f00f897b473f41b6f498cb_JaffaCakes118

  • Size

    96KB

  • Sample

    240709-144n4ayfll

  • MD5

    322d9e4277f00f897b473f41b6f498cb

  • SHA1

    6ec5b61298a06e0d99176edb3694985d5c9fd1ba

  • SHA256

    5f768b2ae599b55caa48c324a24312c0e89598a14b50f5016495bc35414300b2

  • SHA512

    be4b1f9e9b7086127ca249270a6af0e8398cc660a8ceaae333a88d27abdb41c3482b42202bab649b6ba0a420a5e4cf9e14cce2b58becc0ae0f5e251b740d0800

  • SSDEEP

    1536:/tQBHlDf6cO/hIJkGulSc16l6u+NMMl/KlYv1Tq5ThFfNIjnZSF:ElYhNlu8CFFfCnUF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      322d9e4277f00f897b473f41b6f498cb_JaffaCakes118

    • Size

      96KB

    • MD5

      322d9e4277f00f897b473f41b6f498cb

    • SHA1

      6ec5b61298a06e0d99176edb3694985d5c9fd1ba

    • SHA256

      5f768b2ae599b55caa48c324a24312c0e89598a14b50f5016495bc35414300b2

    • SHA512

      be4b1f9e9b7086127ca249270a6af0e8398cc660a8ceaae333a88d27abdb41c3482b42202bab649b6ba0a420a5e4cf9e14cce2b58becc0ae0f5e251b740d0800

    • SSDEEP

      1536:/tQBHlDf6cO/hIJkGulSc16l6u+NMMl/KlYv1Tq5ThFfNIjnZSF:ElYhNlu8CFFfCnUF

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks