Overview

overview

8

Static

static

3

45518723a7...18.exe

windows7-x64

3

45518723a7...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    45518723a7ff6fd61ea02137e7be4967_JaffaCakes118

  • Size

    160KB

  • Sample

    240714-lxv12sybjh

  • MD5

    45518723a7ff6fd61ea02137e7be4967

  • SHA1

    dfabe9eb9e202e33a6dfa733befde97eb95ded00

  • SHA256

    7bb072a21008be185d4cbf27e86ad82116d1ef473c73275bd59cd86fd2da603e

  • SHA512

    6a04dd2b287c0840ba2d4084ed3f5b3b790ded3250457f10c44e68477aae3b4cfeb394524c0adab4458bd6bd331a877c62cac881009046b69d5743421bb3d45f

  • SSDEEP

    1536:ZTmMOmXmvsoqT1hkIec05XRsFdHzxIb8LfV7AoFCjYDrvc2wePolW1fy+r:18mXmfc1hwhsPZLd9we91f

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      45518723a7ff6fd61ea02137e7be4967_JaffaCakes118

    • Size

      160KB

    • MD5

      45518723a7ff6fd61ea02137e7be4967

    • SHA1

      dfabe9eb9e202e33a6dfa733befde97eb95ded00

    • SHA256

      7bb072a21008be185d4cbf27e86ad82116d1ef473c73275bd59cd86fd2da603e

    • SHA512

      6a04dd2b287c0840ba2d4084ed3f5b3b790ded3250457f10c44e68477aae3b4cfeb394524c0adab4458bd6bd331a877c62cac881009046b69d5743421bb3d45f

    • SSDEEP

      1536:ZTmMOmXmvsoqT1hkIec05XRsFdHzxIb8LfV7AoFCjYDrvc2wePolW1fy+r:18mXmfc1hwhsPZLd9we91f

    Score
    8/10
    evasionpersistence

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks