Overview

overview

10

Static

static

3

5c14b50a5f...18.exe

windows7-x64

10

5c14b50a5f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5c14b50a5f12f46ef7d436359e6da0b7_JaffaCakes118

  • Size

    312KB

  • Sample

    240719-qfh3dawekd

  • MD5

    5c14b50a5f12f46ef7d436359e6da0b7

  • SHA1

    8fd55abdff20b6bf3dab63d87032fab3aa8c8f2c

  • SHA256

    516124bbc6ab5379b46e5c923a0b269a29ea272f6c5439f73c48a46ca90e7ef9

  • SHA512

    f11c37ed65f4e321877ac93b2416d7c56833f30a13ba57ba09bc75c827c910ccb716f513b15e4cb95106f7c3035ddd9a08c7fbfa19df844996a301b1621acb9d

  • SSDEEP

    6144:gPbc0f7XP+g3AGJpWVzuNRHeEgRK/fObT/bGiJKv6R7MkZ4lUr8W9HuOGKhvsMMF:Ew27/XvLWpuPeEgRK/fObT/bGiJlMkZg

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5c14b50a5f12f46ef7d436359e6da0b7_JaffaCakes118

    • Size

      312KB

    • MD5

      5c14b50a5f12f46ef7d436359e6da0b7

    • SHA1

      8fd55abdff20b6bf3dab63d87032fab3aa8c8f2c

    • SHA256

      516124bbc6ab5379b46e5c923a0b269a29ea272f6c5439f73c48a46ca90e7ef9

    • SHA512

      f11c37ed65f4e321877ac93b2416d7c56833f30a13ba57ba09bc75c827c910ccb716f513b15e4cb95106f7c3035ddd9a08c7fbfa19df844996a301b1621acb9d

    • SSDEEP

      6144:gPbc0f7XP+g3AGJpWVzuNRHeEgRK/fObT/bGiJKv6R7MkZ4lUr8W9HuOGKhvsMMF:Ew27/XvLWpuPeEgRK/fObT/bGiJlMkZg

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks