Overview

overview

10

Static

static

3

40a7124719...18.exe

windows7-x64

10

40a7124719...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    40a7124719616520a0f75823078b60ed_JaffaCakes118

  • Size

    100KB

  • Sample

    240713-hs47dasgrb

  • MD5

    40a7124719616520a0f75823078b60ed

  • SHA1

    7c07ac17af451408263177f300a31d9470405846

  • SHA256

    cd43c99e7420dfe30ee0befb3356561866c40e9335b37a120ce123f12b070883

  • SHA512

    fac46ef96afe9533b236c9292a01a3133446d355637a807a944a98972e6a18ab38204b0c6e49026afe1dcfde8f1ed60359e35b38303a1f475021129f08b78d24

  • SSDEEP

    1536:6cscX2203Q/QxJcIRGWcOWPWvXArnY1ZPBizyes2NIjnZEJ:YQ/8NJizyepCnCJ

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      40a7124719616520a0f75823078b60ed_JaffaCakes118

    • Size

      100KB

    • MD5

      40a7124719616520a0f75823078b60ed

    • SHA1

      7c07ac17af451408263177f300a31d9470405846

    • SHA256

      cd43c99e7420dfe30ee0befb3356561866c40e9335b37a120ce123f12b070883

    • SHA512

      fac46ef96afe9533b236c9292a01a3133446d355637a807a944a98972e6a18ab38204b0c6e49026afe1dcfde8f1ed60359e35b38303a1f475021129f08b78d24

    • SSDEEP

      1536:6cscX2203Q/QxJcIRGWcOWPWvXArnY1ZPBizyes2NIjnZEJ:YQ/8NJizyepCnCJ

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks