Overview

overview

10

Static

static

3

62dd3ecdd6...18.exe

windows7-x64

10

62dd3ecdd6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    62dd3ecdd604c484dc0c06f21539e0cb_JaffaCakes118

  • Size

    100KB

  • Sample

    240722-mhc3cssdrf

  • MD5

    62dd3ecdd604c484dc0c06f21539e0cb

  • SHA1

    5d9ecfa258d11c2347cf67edcec8227db1e79ba2

  • SHA256

    a622d91e69b841af218d188eb703c5863f6c16c72dea5f6cdbdbb5b5462f5162

  • SHA512

    6b06ba4c66876f33f353c4153b95bbccfb31ad1d995992efba2f7f3793e12f05e842826b1c76d330ee255440e5c1e69368c80c2c8c2543d795d5f9d8ced8f71e

  • SSDEEP

    1536:zHt0S82NTdwlLGZcYADZPU1+73BD88b0ny7NIjnZMd:9wMgZPUQJ7Cned

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      62dd3ecdd604c484dc0c06f21539e0cb_JaffaCakes118

    • Size

      100KB

    • MD5

      62dd3ecdd604c484dc0c06f21539e0cb

    • SHA1

      5d9ecfa258d11c2347cf67edcec8227db1e79ba2

    • SHA256

      a622d91e69b841af218d188eb703c5863f6c16c72dea5f6cdbdbb5b5462f5162

    • SHA512

      6b06ba4c66876f33f353c4153b95bbccfb31ad1d995992efba2f7f3793e12f05e842826b1c76d330ee255440e5c1e69368c80c2c8c2543d795d5f9d8ced8f71e

    • SSDEEP

      1536:zHt0S82NTdwlLGZcYADZPU1+73BD88b0ny7NIjnZMd:9wMgZPUQJ7Cned

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks