Overview

overview

10

Static

static

3

4b29ac4808...18.exe

windows7-x64

10

4b29ac4808...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b29ac480825aee210b76c9605a990ca_JaffaCakes118

  • Size

    300KB

  • Sample

    240715-ymmyxaygne

  • MD5

    4b29ac480825aee210b76c9605a990ca

  • SHA1

    d1ac95d3a8a36721d1cb170d4936ead89169e468

  • SHA256

    dfaccc42dbd490b877cfd84e47d21fb18a3439eeeeea6c161be179e8deb55923

  • SHA512

    ac0c826d5adb6c3b2575b035c1b288b8eace63956cae4d7df23d4b9431035e4ec3de64c70e1df5e974eca91ffd1c32e0cc2ca876e225098a0caa676f1f41f903

  • SSDEEP

    6144:vA+usKuzNSYokX6w1UbgwDO7zRpmM57M186xFGY:IOKuzNSYQEY

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4b29ac480825aee210b76c9605a990ca_JaffaCakes118

    • Size

      300KB

    • MD5

      4b29ac480825aee210b76c9605a990ca

    • SHA1

      d1ac95d3a8a36721d1cb170d4936ead89169e468

    • SHA256

      dfaccc42dbd490b877cfd84e47d21fb18a3439eeeeea6c161be179e8deb55923

    • SHA512

      ac0c826d5adb6c3b2575b035c1b288b8eace63956cae4d7df23d4b9431035e4ec3de64c70e1df5e974eca91ffd1c32e0cc2ca876e225098a0caa676f1f41f903

    • SSDEEP

      6144:vA+usKuzNSYokX6w1UbgwDO7zRpmM57M186xFGY:IOKuzNSYQEY

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks