Overview

overview

10

Static

static

3

3fa45e2560...18.exe

windows7-x64

10

3fa45e2560...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3fa45e25608c15f83b3f2267a0aeeac2_JaffaCakes118

  • Size

    136KB

  • Sample

    240713-brqh9ssanh

  • MD5

    3fa45e25608c15f83b3f2267a0aeeac2

  • SHA1

    7d90bcca2f537b5fa6a67de617f1425415ae9fb0

  • SHA256

    3f3495a3807ff8e0e34b17a8c29f41ec67dd531b05f8eb5ad40dffd6230f7c7f

  • SHA512

    0b2c022fe5511b5e2de4f10a5b7a54a71dcd4dc113432d75f5c355c2aa19d71a1750d5e286964411f4bac2325cb9f2997c1a8747bc96959e050fc700c064eb16

  • SSDEEP

    3072:MpwJovvXFwRBW1cQoj9MYuPCNtrK6tJTVUa37V4em:tu/d2QRYjfTVU4Gem

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      3fa45e25608c15f83b3f2267a0aeeac2_JaffaCakes118

    • Size

      136KB

    • MD5

      3fa45e25608c15f83b3f2267a0aeeac2

    • SHA1

      7d90bcca2f537b5fa6a67de617f1425415ae9fb0

    • SHA256

      3f3495a3807ff8e0e34b17a8c29f41ec67dd531b05f8eb5ad40dffd6230f7c7f

    • SHA512

      0b2c022fe5511b5e2de4f10a5b7a54a71dcd4dc113432d75f5c355c2aa19d71a1750d5e286964411f4bac2325cb9f2997c1a8747bc96959e050fc700c064eb16

    • SSDEEP

      3072:MpwJovvXFwRBW1cQoj9MYuPCNtrK6tJTVUa37V4em:tu/d2QRYjfTVU4Gem

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks