Overview

overview

10

Static

static

3

323e23de88...18.exe

windows7-x64

10

323e23de88...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    323e23de88e8b2fcaf2dc1b5bdace9c6_JaffaCakes118

  • Size

    124KB

  • Sample

    240709-2gg29a1gmd

  • MD5

    323e23de88e8b2fcaf2dc1b5bdace9c6

  • SHA1

    f2cac2ee37f0b73cf7338969d70c714e3f174a3e

  • SHA256

    b95d08c8c56fe21bc736a0be7efd12d907a4f1ff3cf4be777ce636625dee71e3

  • SHA512

    73eb538d4b3e7352684099e149ca02b6be5090c3e76f602d5bad57c10794865b37bb50599cf8728fb009e72e3e5bed0786d4b9271b3ad0379129c8965e2fec61

  • SSDEEP

    1536:qtEyZhwR/uBxeDtMYHa27J14ltxporZ45icNeG0hm:GE8hwR/keV6gJ1uCt45Km

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      323e23de88e8b2fcaf2dc1b5bdace9c6_JaffaCakes118

    • Size

      124KB

    • MD5

      323e23de88e8b2fcaf2dc1b5bdace9c6

    • SHA1

      f2cac2ee37f0b73cf7338969d70c714e3f174a3e

    • SHA256

      b95d08c8c56fe21bc736a0be7efd12d907a4f1ff3cf4be777ce636625dee71e3

    • SHA512

      73eb538d4b3e7352684099e149ca02b6be5090c3e76f602d5bad57c10794865b37bb50599cf8728fb009e72e3e5bed0786d4b9271b3ad0379129c8965e2fec61

    • SSDEEP

      1536:qtEyZhwR/uBxeDtMYHa27J14ltxporZ45icNeG0hm:GE8hwR/keV6gJ1uCt45Km

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks