Overview

overview

10

Static

static

3

48496997af...18.exe

windows7-x64

10

48496997af...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    48496997af0bd62cf6167738e32d5fb9_JaffaCakes118

  • Size

    56KB

  • Sample

    240715-ffx67a1fpg

  • MD5

    48496997af0bd62cf6167738e32d5fb9

  • SHA1

    b3f44b4175f955e68c434e023746badf43e34f9d

  • SHA256

    b139a58689248ad7ff7dc5d235125c58219d4473942cd70a7538feb4fa47f5ac

  • SHA512

    b9861888ed0dc9f63f8480da13e8406223d406c9d31a03a61464c7616dd364fbcb7d7c3081e81feba66a8cc2e88d1b72829a39649e7b2626f31933a82ab021c5

  • SSDEEP

    768:3nH5P/kv6gJ9ECY5f0mq/6/Q/9NF0+LEc8af3ts0E9t:3hkb0Coq2oS+Ljb3ts0E9t

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      48496997af0bd62cf6167738e32d5fb9_JaffaCakes118

    • Size

      56KB

    • MD5

      48496997af0bd62cf6167738e32d5fb9

    • SHA1

      b3f44b4175f955e68c434e023746badf43e34f9d

    • SHA256

      b139a58689248ad7ff7dc5d235125c58219d4473942cd70a7538feb4fa47f5ac

    • SHA512

      b9861888ed0dc9f63f8480da13e8406223d406c9d31a03a61464c7616dd364fbcb7d7c3081e81feba66a8cc2e88d1b72829a39649e7b2626f31933a82ab021c5

    • SSDEEP

      768:3nH5P/kv6gJ9ECY5f0mq/6/Q/9NF0+LEc8af3ts0E9t:3hkb0Coq2oS+Ljb3ts0E9t

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks