Overview

overview

10

Static

static

3

2fcbf30203...18.exe

windows7-x64

10

2fcbf30203...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fcbf302035901dbdc0edc92d5eef4ca_JaffaCakes118

  • Size

    200KB

  • Sample

    240709-la26vayhjc

  • MD5

    2fcbf302035901dbdc0edc92d5eef4ca

  • SHA1

    f8882b732f8488a84bcfd826cb1e2d17bc65dedd

  • SHA256

    0767570da9e3bf0713f618f5a97ca37d62507d0a3770ae26c003ac6944419ea3

  • SHA512

    dc95953f88e40d5f0a228c423d6d0648aa514800dba57eaa50e5e3c8af59f411db2a87660a112026461f6ac143f7d0938d683482e2623e198697c9bc9a365185

  • SSDEEP

    3072:WCATo/0YxM0tQ9nLHbB9WPliBs2HWWEakGJm9Ad:WCF+4QxL7B9WPli+yWWEazf

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      2fcbf302035901dbdc0edc92d5eef4ca_JaffaCakes118

    • Size

      200KB

    • MD5

      2fcbf302035901dbdc0edc92d5eef4ca

    • SHA1

      f8882b732f8488a84bcfd826cb1e2d17bc65dedd

    • SHA256

      0767570da9e3bf0713f618f5a97ca37d62507d0a3770ae26c003ac6944419ea3

    • SHA512

      dc95953f88e40d5f0a228c423d6d0648aa514800dba57eaa50e5e3c8af59f411db2a87660a112026461f6ac143f7d0938d683482e2623e198697c9bc9a365185

    • SSDEEP

      3072:WCATo/0YxM0tQ9nLHbB9WPliBs2HWWEakGJm9Ad:WCF+4QxL7B9WPli+yWWEazf

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks