Overview

overview

10

Static

static

3

5e9f919440...18.exe

windows7-x64

10

5e9f919440...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e9f919440448e41aaa517b103c80dd7_JaffaCakes118

  • Size

    252KB

  • Sample

    240720-ch532averh

  • MD5

    5e9f919440448e41aaa517b103c80dd7

  • SHA1

    12591c0fdcbf567cde5be6503c19b6cbc2a171c2

  • SHA256

    7dc617cc83985940de5fa68cf790d44e31863dee96c6aa337cd575207ca1ca71

  • SHA512

    e721f3a0878bee12b55be16a02fe8f055399ac3dea150c13a0c1149669524eac5970c8af2feccaba431a13ebe9f765f9357f089e92af1221a117142515750804

  • SSDEEP

    3072:QgsdS80wRfrUuFa3iw+SQqTw79ae1TdMPfoxMkdPtcyXDKv31I:QnzR7Bzq8h11qhGBXDKvF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      5e9f919440448e41aaa517b103c80dd7_JaffaCakes118

    • Size

      252KB

    • MD5

      5e9f919440448e41aaa517b103c80dd7

    • SHA1

      12591c0fdcbf567cde5be6503c19b6cbc2a171c2

    • SHA256

      7dc617cc83985940de5fa68cf790d44e31863dee96c6aa337cd575207ca1ca71

    • SHA512

      e721f3a0878bee12b55be16a02fe8f055399ac3dea150c13a0c1149669524eac5970c8af2feccaba431a13ebe9f765f9357f089e92af1221a117142515750804

    • SSDEEP

      3072:QgsdS80wRfrUuFa3iw+SQqTw79ae1TdMPfoxMkdPtcyXDKv31I:QnzR7Bzq8h11qhGBXDKvF

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks