Overview

overview

10

Static

static

3

32277bb18d...18.exe

windows7-x64

10

32277bb18d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32277bb18d829517a858c14667020a9f_JaffaCakes118

  • Size

    152KB

  • Sample

    240709-1z2zpsydjp

  • MD5

    32277bb18d829517a858c14667020a9f

  • SHA1

    f913ed5651eff8967d38c7449ce56f66a3285b59

  • SHA256

    336ad563a875e8cf1fbc45fb580a82ce989c6bd79bbf8ca61b276259de6863c7

  • SHA512

    d2f48279a78414f202cd0e6a63b0abdd1fa9a9532e5ec47b45ee3b5ecc55b74ad43aa2dcb79c749a6d29e8f982beeaac7eef07b818150ef76b6b9272c31828d7

  • SSDEEP

    1536:BhWmF+VoV6qZO5WV9PZ1K+smtK4/ZWnKjF:BhWmF+VoV6qZO5W7afKj

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      32277bb18d829517a858c14667020a9f_JaffaCakes118

    • Size

      152KB

    • MD5

      32277bb18d829517a858c14667020a9f

    • SHA1

      f913ed5651eff8967d38c7449ce56f66a3285b59

    • SHA256

      336ad563a875e8cf1fbc45fb580a82ce989c6bd79bbf8ca61b276259de6863c7

    • SHA512

      d2f48279a78414f202cd0e6a63b0abdd1fa9a9532e5ec47b45ee3b5ecc55b74ad43aa2dcb79c749a6d29e8f982beeaac7eef07b818150ef76b6b9272c31828d7

    • SSDEEP

      1536:BhWmF+VoV6qZO5WV9PZ1K+smtK4/ZWnKjF:BhWmF+VoV6qZO5W7afKj

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks