Overview

overview

10

Static

static

3

65062b8975...18.exe

windows7-x64

10

65062b8975...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    65062b8975ca34ec7175477175513b0e_JaffaCakes118

  • Size

    136KB

  • Sample

    240722-19mmrs1gjd

  • MD5

    65062b8975ca34ec7175477175513b0e

  • SHA1

    e9a40ade55a5f8bec2104bb5d15e47ff617e36a9

  • SHA256

    c04183ee2cbb42e947f343b36808af2992e12c48c37385a0105960cbc0751f5a

  • SHA512

    dc6a321cfcd432cfae6dc079cf896582e52e3bfc204cee318f95f4fa0f53eb9961df788901e07f7d8f5294155b0f7a0dc810ca8e86c22b986bf7fb935abbce9f

  • SSDEEP

    1536:jd6I2iBV85nPn5Qa6NUbaxaZ65gX4Tv9u2y0aZAbs/nLgiow28fz+DliO3Mx9rdD:MI2kVh7UbaxHgOg/n8if7h9hMWP

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      65062b8975ca34ec7175477175513b0e_JaffaCakes118

    • Size

      136KB

    • MD5

      65062b8975ca34ec7175477175513b0e

    • SHA1

      e9a40ade55a5f8bec2104bb5d15e47ff617e36a9

    • SHA256

      c04183ee2cbb42e947f343b36808af2992e12c48c37385a0105960cbc0751f5a

    • SHA512

      dc6a321cfcd432cfae6dc079cf896582e52e3bfc204cee318f95f4fa0f53eb9961df788901e07f7d8f5294155b0f7a0dc810ca8e86c22b986bf7fb935abbce9f

    • SSDEEP

      1536:jd6I2iBV85nPn5Qa6NUbaxaZ65gX4Tv9u2y0aZAbs/nLgiow28fz+DliO3Mx9rdD:MI2kVh7UbaxHgOg/n8if7h9hMWP

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks