Overview

overview

10

Static

static

3

49216affc9...18.exe

windows7-x64

10

49216affc9...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    49216affc9ec3ee938f3cdba88d40030_JaffaCakes118

  • Size

    292KB

  • Sample

    240715-k3ltws1gqc

  • MD5

    49216affc9ec3ee938f3cdba88d40030

  • SHA1

    9b1976abf191729e055f564e7a1fa8efb00bd315

  • SHA256

    11ab5a5a032f539f8edaa2496464c7bd8a71b2ff2835f3088ac2eb49da777f74

  • SHA512

    18972fb37a76ccfbfd4f999ff2bbb97c562975bfb78e76445d4d4ebcef1992496084e75e282eaf5000092c502dfebf505f37c0fad22549ee4984873879b597d1

  • SSDEEP

    3072:CnMOd4B9diPOBq7CFLuupaFBzxk7c7awSZohDnjV2S8NmMx3WarRDS0btpTxzsUi:CIi4Luupszxk7USZoDnp23xmg93tEU

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      49216affc9ec3ee938f3cdba88d40030_JaffaCakes118

    • Size

      292KB

    • MD5

      49216affc9ec3ee938f3cdba88d40030

    • SHA1

      9b1976abf191729e055f564e7a1fa8efb00bd315

    • SHA256

      11ab5a5a032f539f8edaa2496464c7bd8a71b2ff2835f3088ac2eb49da777f74

    • SHA512

      18972fb37a76ccfbfd4f999ff2bbb97c562975bfb78e76445d4d4ebcef1992496084e75e282eaf5000092c502dfebf505f37c0fad22549ee4984873879b597d1

    • SSDEEP

      3072:CnMOd4B9diPOBq7CFLuupaFBzxk7c7awSZohDnjV2S8NmMx3WarRDS0btpTxzsUi:CIi4Luupszxk7USZoDnp23xmg93tEU

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks