Overview

overview

10

Static

static

3

5bbda395b8...18.exe

windows7-x64

10

5bbda395b8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5bbda395b8e81a4d4b17a215b8952110_JaffaCakes118

  • Size

    252KB

  • Sample

    240719-njllkaydkk

  • MD5

    5bbda395b8e81a4d4b17a215b8952110

  • SHA1

    c0038e7a2d97f3db194c00a89dbdfb417458e426

  • SHA256

    eb14d8f11f695efae12dfce82083d6059ca291791450d73cbbb7c4e879185037

  • SHA512

    41d9a9fc5aa9f148443ca1e16917705e550ff45228b28497f962f1f01b8611895dc291ef59290ea8f027a3bf29956078ceda136afd5bd48b913c1ac3e639d181

  • SSDEEP

    6144:x+ATwyrimEU/EztV++Jbtd4lfn8hFXbTom85FMnH:xNT5rimr/EztV++JZd4lfnSTo7F

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5bbda395b8e81a4d4b17a215b8952110_JaffaCakes118

    • Size

      252KB

    • MD5

      5bbda395b8e81a4d4b17a215b8952110

    • SHA1

      c0038e7a2d97f3db194c00a89dbdfb417458e426

    • SHA256

      eb14d8f11f695efae12dfce82083d6059ca291791450d73cbbb7c4e879185037

    • SHA512

      41d9a9fc5aa9f148443ca1e16917705e550ff45228b28497f962f1f01b8611895dc291ef59290ea8f027a3bf29956078ceda136afd5bd48b913c1ac3e639d181

    • SSDEEP

      6144:x+ATwyrimEU/EztV++Jbtd4lfn8hFXbTom85FMnH:xNT5rimr/EztV++JZd4lfnSTo7F

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks