Overview

overview

10

Static

static

3

31c3c383aa...18.exe

windows7-x64

10

31c3c383aa...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31c3c383aa66654e563aa8dc0b290c09_JaffaCakes118

  • Size

    96KB

  • Sample

    240709-ypgjxathje

  • MD5

    31c3c383aa66654e563aa8dc0b290c09

  • SHA1

    64a0981ea6a43dde76b9d3cacf50618a14837f75

  • SHA256

    e9ea087fa4680befe0cb8900afcd1da3bd17b68d41c97d6808773da265b0e7f4

  • SHA512

    5d09dbc413833df318413f474713379fc0fa596d42f7e41b8e326183876168926960db512c7d5d25b106aaf80e566722e640ca59ba9b1f28db97ba9ba7230e1c

  • SSDEEP

    1536:XmQBHQf6cO/hawkGulSc16l6u+NMMl/KlYv1Tq5ThFfNIjnZHL:xbh0lu8CFFfCn1L

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      31c3c383aa66654e563aa8dc0b290c09_JaffaCakes118

    • Size

      96KB

    • MD5

      31c3c383aa66654e563aa8dc0b290c09

    • SHA1

      64a0981ea6a43dde76b9d3cacf50618a14837f75

    • SHA256

      e9ea087fa4680befe0cb8900afcd1da3bd17b68d41c97d6808773da265b0e7f4

    • SHA512

      5d09dbc413833df318413f474713379fc0fa596d42f7e41b8e326183876168926960db512c7d5d25b106aaf80e566722e640ca59ba9b1f28db97ba9ba7230e1c

    • SSDEEP

      1536:XmQBHQf6cO/hawkGulSc16l6u+NMMl/KlYv1Tq5ThFfNIjnZHL:xbh0lu8CFFfCn1L

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks