Overview

overview

10

Static

static

3

3d6fa07910...18.exe

windows7-x64

10

3d6fa07910...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d6fa07910ff6b03f55a0d7dc103fea9_JaffaCakes118

  • Size

    88KB

  • Sample

    240712-pz9trswelc

  • MD5

    3d6fa07910ff6b03f55a0d7dc103fea9

  • SHA1

    afbe3a7b7bb1b201aded0d08ff089c1d92a5a722

  • SHA256

    eebc8167d9562cb7b4790686f1e067e29a728dd30ea610ae24b8dc9fd8576cd0

  • SHA512

    a36a9112e69eea034b06351ad025ff729663b8d479854240095b9600281709c32405a1b410f46337e5658b8d303b80ac7e312e0250785aacd4de11c7749bbb77

  • SSDEEP

    1536:i9QRvtVSpy8tXG06YpqdXTsYJ/F+FBFIFGFYF7DUZxTZJca:BRv3Ss0G0mZUB

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3d6fa07910ff6b03f55a0d7dc103fea9_JaffaCakes118

    • Size

      88KB

    • MD5

      3d6fa07910ff6b03f55a0d7dc103fea9

    • SHA1

      afbe3a7b7bb1b201aded0d08ff089c1d92a5a722

    • SHA256

      eebc8167d9562cb7b4790686f1e067e29a728dd30ea610ae24b8dc9fd8576cd0

    • SHA512

      a36a9112e69eea034b06351ad025ff729663b8d479854240095b9600281709c32405a1b410f46337e5658b8d303b80ac7e312e0250785aacd4de11c7749bbb77

    • SSDEEP

      1536:i9QRvtVSpy8tXG06YpqdXTsYJ/F+FBFIFGFYF7DUZxTZJca:BRv3Ss0G0mZUB

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks