Overview

overview

10

Static

static

3

356d2edfc8...18.exe

windows7-x64

10

356d2edfc8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    356d2edfc82fcf7889400c1dbbde7ce7_JaffaCakes118

  • Size

    232KB

  • Sample

    240710-thh2yawhpm

  • MD5

    356d2edfc82fcf7889400c1dbbde7ce7

  • SHA1

    98a1591394171a682b491bfbd5012bd068a8921e

  • SHA256

    7637f10a7232566013778d73380f30da49ca0dc5bf3a6d59f073501f7deee429

  • SHA512

    16c367bc7b2328f936a09295131196f2108011ce8f1550d070ff15decfc5d1afc6fde7136534b0de3a7c4c37388df4e828f2cf669bd99c7875df3066030abcae

  • SSDEEP

    6144:FyJz3PFKs78vpRTlEqxF6snji81RUinKbLOa:4zPhpz

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      356d2edfc82fcf7889400c1dbbde7ce7_JaffaCakes118

    • Size

      232KB

    • MD5

      356d2edfc82fcf7889400c1dbbde7ce7

    • SHA1

      98a1591394171a682b491bfbd5012bd068a8921e

    • SHA256

      7637f10a7232566013778d73380f30da49ca0dc5bf3a6d59f073501f7deee429

    • SHA512

      16c367bc7b2328f936a09295131196f2108011ce8f1550d070ff15decfc5d1afc6fde7136534b0de3a7c4c37388df4e828f2cf669bd99c7875df3066030abcae

    • SSDEEP

      6144:FyJz3PFKs78vpRTlEqxF6snji81RUinKbLOa:4zPhpz

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks