Overview

overview

10

Static

static

3

61558b8afe...18.exe

windows7-x64

10

61558b8afe...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    61558b8afe8ec4affd57dfb31a3272aa_JaffaCakes118

  • Size

    224KB

  • Sample

    240721-zkhf3swejp

  • MD5

    61558b8afe8ec4affd57dfb31a3272aa

  • SHA1

    a7f996e83c6bf512193e39abd3d6554e45ef8604

  • SHA256

    6d5cfda6afcffa5fb2b9d5770d41d2c01eca8b11c28a14d4e79dac3fedf07e7e

  • SHA512

    95a1473ede885abd3f17aeb5f55e30b678ea10c59b02e1424a5f51c5ea82abc9b5c1c2983d8623b400d78d6191b78ef88bd9cf351a9fc2dbb9f82ddd0ec61f77

  • SSDEEP

    3072:hiYO7aWbqDImDrT+UvtkvnNBLieMyiayNe2XKrJlZm+lDC:hFKuImDrT+U1QtMyiaO6Nk

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      61558b8afe8ec4affd57dfb31a3272aa_JaffaCakes118

    • Size

      224KB

    • MD5

      61558b8afe8ec4affd57dfb31a3272aa

    • SHA1

      a7f996e83c6bf512193e39abd3d6554e45ef8604

    • SHA256

      6d5cfda6afcffa5fb2b9d5770d41d2c01eca8b11c28a14d4e79dac3fedf07e7e

    • SHA512

      95a1473ede885abd3f17aeb5f55e30b678ea10c59b02e1424a5f51c5ea82abc9b5c1c2983d8623b400d78d6191b78ef88bd9cf351a9fc2dbb9f82ddd0ec61f77

    • SSDEEP

      3072:hiYO7aWbqDImDrT+UvtkvnNBLieMyiayNe2XKrJlZm+lDC:hFKuImDrT+U1QtMyiaO6Nk

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks