Overview

overview

10

Static

static

3

4df9c6a2d3...18.exe

windows7-x64

10

4df9c6a2d3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4df9c6a2d3e8316064e30fefb51c4775_JaffaCakes118

  • Size

    228KB

  • Sample

    240716-mtm2psydll

  • MD5

    4df9c6a2d3e8316064e30fefb51c4775

  • SHA1

    8e2afe89ccba416c57c1de648cfa7327274cf2fb

  • SHA256

    6992a7439366e43baec6689d6b19ec0e7dde4aba26e0893b9ce94894a29a15bf

  • SHA512

    881500afe1ad74b21cf8b7fb379ba6bf629879500b6e59cba23b1ad94fd03e625eb183255486450785792b93090e1127ebc2132168317a6165a172ed52ab2cf2

  • SSDEEP

    3072:+ZI04tpiO76f474Sx+0IO/5BJB1bfigTHfhzqcuB2Ysv0NM:+Z0viO76f47k7c5vtLfhznR

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      4df9c6a2d3e8316064e30fefb51c4775_JaffaCakes118

    • Size

      228KB

    • MD5

      4df9c6a2d3e8316064e30fefb51c4775

    • SHA1

      8e2afe89ccba416c57c1de648cfa7327274cf2fb

    • SHA256

      6992a7439366e43baec6689d6b19ec0e7dde4aba26e0893b9ce94894a29a15bf

    • SHA512

      881500afe1ad74b21cf8b7fb379ba6bf629879500b6e59cba23b1ad94fd03e625eb183255486450785792b93090e1127ebc2132168317a6165a172ed52ab2cf2

    • SSDEEP

      3072:+ZI04tpiO76f474Sx+0IO/5BJB1bfigTHfhzqcuB2Ysv0NM:+Z0viO76f47k7c5vtLfhznR

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks