Overview

overview

10

Static

static

3

4087135a4e...18.exe

windows7-x64

10

4087135a4e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4087135a4e0a07e7c4066979466898c3_JaffaCakes118

  • Size

    152KB

  • Sample

    240713-g5gfea1gmh

  • MD5

    4087135a4e0a07e7c4066979466898c3

  • SHA1

    9f578340164a790ce786e43a7d1eb3b5f0761535

  • SHA256

    9546c0c4ced4ac6fb5a27f885911e7012137ba94159bbfc5b70d6898b6484aa7

  • SHA512

    5e782aa9f75da53dbf6ae02397fc73b7e673eb087438956128e28ae5f276de096b1d3e601dd62b395779a984a13da5508ada3fdadddcd51f62224d7452b49401

  • SSDEEP

    3072:DmlkPTYhjIB+7MxJUbaxI3zQyzLBuT+u3:z+7Mxa0yzE

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4087135a4e0a07e7c4066979466898c3_JaffaCakes118

    • Size

      152KB

    • MD5

      4087135a4e0a07e7c4066979466898c3

    • SHA1

      9f578340164a790ce786e43a7d1eb3b5f0761535

    • SHA256

      9546c0c4ced4ac6fb5a27f885911e7012137ba94159bbfc5b70d6898b6484aa7

    • SHA512

      5e782aa9f75da53dbf6ae02397fc73b7e673eb087438956128e28ae5f276de096b1d3e601dd62b395779a984a13da5508ada3fdadddcd51f62224d7452b49401

    • SSDEEP

      3072:DmlkPTYhjIB+7MxJUbaxI3zQyzLBuT+u3:z+7Mxa0yzE

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks