Overview

overview

10

Static

static

3

3360b9db78...18.exe

windows7-x64

10

3360b9db78...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3360b9db782730752592d275a53c1ab0_JaffaCakes118

  • Size

    156KB

  • Sample

    240710-flfjbszcre

  • MD5

    3360b9db782730752592d275a53c1ab0

  • SHA1

    82c258df3fe6f52b0c96c2d602d602d4679a4a46

  • SHA256

    1cb582ebc3cae4f703155214be849ac7da4b0c20527fb0aee4ce294e6abc5065

  • SHA512

    651649023b87c5a8f3f2717ad4de6da0d3f083fe7cf8f0f3dd4e484690f9ca3c30287cfbbbd576ea510754a1c7bf8e9ea818e4af6532a2566da177ec014a844a

  • SSDEEP

    3072:pvo0koEdu3kSESulCVRgQPwU3MppI1zePMThBI4oQZiEVMZW:9o3u3ESul9LI1zeEheWTMg

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3360b9db782730752592d275a53c1ab0_JaffaCakes118

    • Size

      156KB

    • MD5

      3360b9db782730752592d275a53c1ab0

    • SHA1

      82c258df3fe6f52b0c96c2d602d602d4679a4a46

    • SHA256

      1cb582ebc3cae4f703155214be849ac7da4b0c20527fb0aee4ce294e6abc5065

    • SHA512

      651649023b87c5a8f3f2717ad4de6da0d3f083fe7cf8f0f3dd4e484690f9ca3c30287cfbbbd576ea510754a1c7bf8e9ea818e4af6532a2566da177ec014a844a

    • SSDEEP

      3072:pvo0koEdu3kSESulCVRgQPwU3MppI1zePMThBI4oQZiEVMZW:9o3u3ESul9LI1zeEheWTMg

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks