Overview

overview

10

Static

static

3

3e7fcf3f60...18.exe

windows7-x64

10

3e7fcf3f60...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e7fcf3f6079cbcc5459c62af07634a2_JaffaCakes118

  • Size

    169KB

  • Sample

    240712-xmyjzaybna

  • MD5

    3e7fcf3f6079cbcc5459c62af07634a2

  • SHA1

    8f70bf4409f218ee9d1ed12198271d88b37d3d42

  • SHA256

    22f1c6cc0c222ad855d4aa779b4e5eea81b51cc2a9f0bc1efe1a61f600bb742a

  • SHA512

    da2bb337e2a8d51a1902e619f6915e3f8b7696d5d41b3d9c266997654e232cb55d438cd068871fc6db9b0438065a2284f628c3eccd460008a53532ac5bc67dba

  • SSDEEP

    1536:ZbHwMBRf8g6fTTmQXMXBYUR5bOxyUpWaarEt:9pMgjQiOxyUIQ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3e7fcf3f6079cbcc5459c62af07634a2_JaffaCakes118

    • Size

      169KB

    • MD5

      3e7fcf3f6079cbcc5459c62af07634a2

    • SHA1

      8f70bf4409f218ee9d1ed12198271d88b37d3d42

    • SHA256

      22f1c6cc0c222ad855d4aa779b4e5eea81b51cc2a9f0bc1efe1a61f600bb742a

    • SHA512

      da2bb337e2a8d51a1902e619f6915e3f8b7696d5d41b3d9c266997654e232cb55d438cd068871fc6db9b0438065a2284f628c3eccd460008a53532ac5bc67dba

    • SSDEEP

      1536:ZbHwMBRf8g6fTTmQXMXBYUR5bOxyUpWaarEt:9pMgjQiOxyUIQ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks