Overview

overview

8

Static

static

3

352f83ba1e...18.exe

windows7-x64

8

352f83ba1e...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    352f83ba1eaed8064ee7c365c474fafb_JaffaCakes118

  • Size

    164KB

  • Sample

    240710-r8nc8swemb

  • MD5

    352f83ba1eaed8064ee7c365c474fafb

  • SHA1

    dfe7f1f213e3a99feeb0d232c823000c7ff9c121

  • SHA256

    bab4cecd6675ec4064746d982dcefe0827e626c50b170ef841c009f8f0bcf569

  • SHA512

    8ddc3add2236819b1dab19b81f5e609244c365bd70df6a715005ce0ab28fa21c950b6efe89ac9fab21acf85492af0b8d028d3484c06eee2738e02efcbae4acda

  • SSDEEP

    1536:fO2bUCAKF9gN72keUvYQKFUi4doJqaRQo9ioSlbfD4dDWRlWVRK8+h:doIqN7yw3zdoJbCo9mln4FLa

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      352f83ba1eaed8064ee7c365c474fafb_JaffaCakes118

    • Size

      164KB

    • MD5

      352f83ba1eaed8064ee7c365c474fafb

    • SHA1

      dfe7f1f213e3a99feeb0d232c823000c7ff9c121

    • SHA256

      bab4cecd6675ec4064746d982dcefe0827e626c50b170ef841c009f8f0bcf569

    • SHA512

      8ddc3add2236819b1dab19b81f5e609244c365bd70df6a715005ce0ab28fa21c950b6efe89ac9fab21acf85492af0b8d028d3484c06eee2738e02efcbae4acda

    • SSDEEP

      1536:fO2bUCAKF9gN72keUvYQKFUi4doJqaRQo9ioSlbfD4dDWRlWVRK8+h:doIqN7yw3zdoJbCo9mln4FLa

    Score
    8/10
    evasionpersistence

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks