Overview

overview

10

Static

static

3

3cea2651a1...18.exe

windows7-x64

10

3cea2651a1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3cea2651a1632abd9bf37bd30a01527f_JaffaCakes118

  • Size

    31KB

  • Sample

    240712-lz81paydjq

  • MD5

    3cea2651a1632abd9bf37bd30a01527f

  • SHA1

    2f406b758e9777dc07007fe829b2f4eac29a4070

  • SHA256

    7aa888afa1911570b766df128b4bfe025fe9b75da8c255609af856b5ca0a12a5

  • SHA512

    922d8038090ed55b5dc9ddbc0170f95ca62b243d4f44b15c1230aeb7a9ebce81757f9791c8e649565a72e0616c5ff41ed56435edad051503348db5f68538b991

  • SSDEEP

    768:2SneDDnFhlVVZ4omjGU8zHTHXzXHCzcsHizTxavc:2SnQhB+pjGU4j5j0vc

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3cea2651a1632abd9bf37bd30a01527f_JaffaCakes118

    • Size

      31KB

    • MD5

      3cea2651a1632abd9bf37bd30a01527f

    • SHA1

      2f406b758e9777dc07007fe829b2f4eac29a4070

    • SHA256

      7aa888afa1911570b766df128b4bfe025fe9b75da8c255609af856b5ca0a12a5

    • SHA512

      922d8038090ed55b5dc9ddbc0170f95ca62b243d4f44b15c1230aeb7a9ebce81757f9791c8e649565a72e0616c5ff41ed56435edad051503348db5f68538b991

    • SSDEEP

      768:2SneDDnFhlVVZ4omjGU8zHTHXzXHCzcsHizTxavc:2SnQhB+pjGU4j5j0vc

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks