Overview

overview

10

Static

static

3

3ee6d7e901...18.exe

windows7-x64

10

3ee6d7e901...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ee6d7e901edd4cd091035ca9907140c_JaffaCakes118

  • Size

    100KB

  • Sample

    240712-z2rfbazgrk

  • MD5

    3ee6d7e901edd4cd091035ca9907140c

  • SHA1

    c220c42d59a5d72614796e880444cc16ae3da38b

  • SHA256

    1fed4cadf4ae3ad055932c8f29239279af1ea000ade2ac049f343fe4c1298fc0

  • SHA512

    ac37df73cc6e19cb253fffe3c8996ba211b476ba5facf843e073486e8383320c18226b37172b2928734983a79a83e7d64b29e66f970199c69d8c8fd538a54048

  • SSDEEP

    1536:SZtGW82NTzwd2MGAc4ohrPXo+73Rez8b0SyuNIjnZq:gwd5urPX7CuCnY

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3ee6d7e901edd4cd091035ca9907140c_JaffaCakes118

    • Size

      100KB

    • MD5

      3ee6d7e901edd4cd091035ca9907140c

    • SHA1

      c220c42d59a5d72614796e880444cc16ae3da38b

    • SHA256

      1fed4cadf4ae3ad055932c8f29239279af1ea000ade2ac049f343fe4c1298fc0

    • SHA512

      ac37df73cc6e19cb253fffe3c8996ba211b476ba5facf843e073486e8383320c18226b37172b2928734983a79a83e7d64b29e66f970199c69d8c8fd538a54048

    • SSDEEP

      1536:SZtGW82NTzwd2MGAc4ohrPXo+73Rez8b0SyuNIjnZq:gwd5urPX7CuCnY

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks