Overview

overview

10

Static

static

3

5d297ea7eb...18.exe

windows7-x64

10

5d297ea7eb...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d297ea7eb4a579a6bf5105f60f83069_JaffaCakes118

  • Size

    156KB

  • Sample

    240719-w7msjaxgra

  • MD5

    5d297ea7eb4a579a6bf5105f60f83069

  • SHA1

    df3409f6d6fefb2b7c1814ee6ecd6df1dd5f8d32

  • SHA256

    732bd0c945eb0124095040d796c4c67de87ae48c2e366764f766e61ea332370c

  • SHA512

    fad745d145d342a54f300ff08dbe1ecbb52d2fc0fb2b2104a69d46e398370648b7113fbc8f9f521298fa76a6e0fd9191155348492cd4296b5d525900606b9ea9

  • SSDEEP

    1536:xhkummuYS/rBU8gRDGHPOGMmUbaxGAka+t/K9rCGaV9mw7Jqx8M+dzAbFQgRV:ymuYS1a4UbaxqkCGaVD7JqfKAbuo

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5d297ea7eb4a579a6bf5105f60f83069_JaffaCakes118

    • Size

      156KB

    • MD5

      5d297ea7eb4a579a6bf5105f60f83069

    • SHA1

      df3409f6d6fefb2b7c1814ee6ecd6df1dd5f8d32

    • SHA256

      732bd0c945eb0124095040d796c4c67de87ae48c2e366764f766e61ea332370c

    • SHA512

      fad745d145d342a54f300ff08dbe1ecbb52d2fc0fb2b2104a69d46e398370648b7113fbc8f9f521298fa76a6e0fd9191155348492cd4296b5d525900606b9ea9

    • SSDEEP

      1536:xhkummuYS/rBU8gRDGHPOGMmUbaxGAka+t/K9rCGaV9mw7Jqx8M+dzAbFQgRV:ymuYS1a4UbaxqkCGaVD7JqfKAbuo

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks