Overview

overview

10

Static

static

3

430ad1e462...18.exe

windows7-x64

10

430ad1e462...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    430ad1e462cb3e206a304cf97dda76e6_JaffaCakes118

  • Size

    128KB

  • Sample

    240713-x8f7tathmr

  • MD5

    430ad1e462cb3e206a304cf97dda76e6

  • SHA1

    b075764d918c9f3d8b9976ae45f6398a7a7706fc

  • SHA256

    87bf96d02e831c8f1e2b913d101f90611953dc3eb2fde89cd10fd729b483545b

  • SHA512

    9202b1fa44fc2cb306a970059d9d10d39e751062d71accbef2483379e2cb09db5df2da3dab9014d21165b73855aff9f99ea333e00400ccd3023233b2cb4fce33

  • SSDEEP

    3072:e1xo4M5CZwYnobhfQp8HTWxD3y4CpCfCGCCOCwC9CvCFCfCLCvCUCLC2FInROUSp:Jg3yGFInRO

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      430ad1e462cb3e206a304cf97dda76e6_JaffaCakes118

    • Size

      128KB

    • MD5

      430ad1e462cb3e206a304cf97dda76e6

    • SHA1

      b075764d918c9f3d8b9976ae45f6398a7a7706fc

    • SHA256

      87bf96d02e831c8f1e2b913d101f90611953dc3eb2fde89cd10fd729b483545b

    • SHA512

      9202b1fa44fc2cb306a970059d9d10d39e751062d71accbef2483379e2cb09db5df2da3dab9014d21165b73855aff9f99ea333e00400ccd3023233b2cb4fce33

    • SSDEEP

      3072:e1xo4M5CZwYnobhfQp8HTWxD3y4CpCfCGCCOCwC9CvCFCfCLCvCUCLC2FInROUSp:Jg3yGFInRO

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks