Overview

overview

10

Static

static

3

342a796a98...18.exe

windows7-x64

10

342a796a98...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    342a796a98083a08a0be19c80926e48c_JaffaCakes118

  • Size

    320KB

  • Sample

    240710-lh5a6ssbpb

  • MD5

    342a796a98083a08a0be19c80926e48c

  • SHA1

    bc01a82c40d2e3d537cdf71cc081da365fbd3dff

  • SHA256

    e25d703ceb160f24d1d9e37244de90f4406b818a4510286b052b977564bc03f8

  • SHA512

    e7ee2cf93047894df82c586d968c73ca863c57593f052adce40b892dfd650971f3113bd853e4dd5df1bc438d3b3ce03d78109a94c73d6c0e808e859630cdd5f2

  • SSDEEP

    6144:eLyKI//d8xgN3+E9xz3DfQr1w2O6EU02DPp9nrg5G35aJevhRGGhfZkEscw0LDNv:ABg9+EDEnhtHAJevHsEscw0Lhv

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      342a796a98083a08a0be19c80926e48c_JaffaCakes118

    • Size

      320KB

    • MD5

      342a796a98083a08a0be19c80926e48c

    • SHA1

      bc01a82c40d2e3d537cdf71cc081da365fbd3dff

    • SHA256

      e25d703ceb160f24d1d9e37244de90f4406b818a4510286b052b977564bc03f8

    • SHA512

      e7ee2cf93047894df82c586d968c73ca863c57593f052adce40b892dfd650971f3113bd853e4dd5df1bc438d3b3ce03d78109a94c73d6c0e808e859630cdd5f2

    • SSDEEP

      6144:eLyKI//d8xgN3+E9xz3DfQr1w2O6EU02DPp9nrg5G35aJevhRGGhfZkEscw0LDNv:ABg9+EDEnhtHAJevHsEscw0Lhv

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks