Overview

overview

10

Static

static

3

5ca1398abc...18.exe

windows7-x64

10

5ca1398abc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ca1398abc1b439215754e9b6a45af08_JaffaCakes118

  • Size

    220KB

  • Sample

    240719-tetn9syeqr

  • MD5

    5ca1398abc1b439215754e9b6a45af08

  • SHA1

    94626286bc1ff76ae9ae2de4e86e706ccd1e55f7

  • SHA256

    eeed4aeabed114e500a69ce62ae00c4bacde831eab2b169424c06f140f9d1b97

  • SHA512

    1e2f527bdc8f05ce3ccd172590fee1cbc6f270edece56099db5bf022626f2107642a2688817d0596f4980c2961d4fc6cb24021f0627a7a21dc2ad4366a6b6055

  • SSDEEP

    3072:jcWJJk28YUL4qx9RIHgil3UuhSa3U3dDpd6Oy+MIrnj3JnNPW:wWHkL15x9SHVe1jbu

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5ca1398abc1b439215754e9b6a45af08_JaffaCakes118

    • Size

      220KB

    • MD5

      5ca1398abc1b439215754e9b6a45af08

    • SHA1

      94626286bc1ff76ae9ae2de4e86e706ccd1e55f7

    • SHA256

      eeed4aeabed114e500a69ce62ae00c4bacde831eab2b169424c06f140f9d1b97

    • SHA512

      1e2f527bdc8f05ce3ccd172590fee1cbc6f270edece56099db5bf022626f2107642a2688817d0596f4980c2961d4fc6cb24021f0627a7a21dc2ad4366a6b6055

    • SSDEEP

      3072:jcWJJk28YUL4qx9RIHgil3UuhSa3U3dDpd6Oy+MIrnj3JnNPW:wWHkL15x9SHVe1jbu

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks