Overview

overview

10

Static

static

3

4a405fe825...18.exe

windows7-x64

10

4a405fe825...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a405fe8257ca12b8cc7eff1a8bb1596_JaffaCakes118

  • Size

    316KB

  • Sample

    240715-ssf5nazdqa

  • MD5

    4a405fe8257ca12b8cc7eff1a8bb1596

  • SHA1

    5ac325b8a6985d503e952f75163fb28ec1bfe902

  • SHA256

    1ff33d7cbfda905d82c026888185a79772c603125e8e95ca22af602ff90c29b7

  • SHA512

    3f1fa426fab7bef41808674c2a4d598797d997ff1f8e71b55c629f350b9409643638f09ca9046c29d6c6c882fe85f5c96628f8d12268bc361108136fd3530bbd

  • SSDEEP

    3072:Jmmw9HYkQqHd0/sQPO1ou2qDr//GeTb3O/ea6LOsDxB:AHYkt90/sQc///3Oj6LOs

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4a405fe8257ca12b8cc7eff1a8bb1596_JaffaCakes118

    • Size

      316KB

    • MD5

      4a405fe8257ca12b8cc7eff1a8bb1596

    • SHA1

      5ac325b8a6985d503e952f75163fb28ec1bfe902

    • SHA256

      1ff33d7cbfda905d82c026888185a79772c603125e8e95ca22af602ff90c29b7

    • SHA512

      3f1fa426fab7bef41808674c2a4d598797d997ff1f8e71b55c629f350b9409643638f09ca9046c29d6c6c882fe85f5c96628f8d12268bc361108136fd3530bbd

    • SSDEEP

      3072:Jmmw9HYkQqHd0/sQPO1ou2qDr//GeTb3O/ea6LOsDxB:AHYkt90/sQc///3Oj6LOs

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks