Overview

overview

10

Static

static

3

632211096e...18.exe

windows7-x64

10

632211096e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    632211096efa35152243473f851d2c89_JaffaCakes118

  • Size

    132KB

  • Sample

    240722-n3hc9awdqf

  • MD5

    632211096efa35152243473f851d2c89

  • SHA1

    821915616aca176239a8e350d0a85aeebe53b5fd

  • SHA256

    618dab063566becf8082da1923cbb5b959002536330aed0541e8782af418d198

  • SHA512

    10ec1dda11e384ecf1c2d6e475a5f40fa42c8c12586a5e9516f09d383095ad0c230b3d5785ccc1870bc1ab263241aa9d9c13d150c54b78eb621b8a0435fcb694

  • SSDEEP

    1536:pwWGhgYu9+7gWbrimfWSeJFzkRcTwdE1dIumgDL0FfxTGHzejyz4:pwKT8gWi2eJFzkRswZumgDLOfqze

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      632211096efa35152243473f851d2c89_JaffaCakes118

    • Size

      132KB

    • MD5

      632211096efa35152243473f851d2c89

    • SHA1

      821915616aca176239a8e350d0a85aeebe53b5fd

    • SHA256

      618dab063566becf8082da1923cbb5b959002536330aed0541e8782af418d198

    • SHA512

      10ec1dda11e384ecf1c2d6e475a5f40fa42c8c12586a5e9516f09d383095ad0c230b3d5785ccc1870bc1ab263241aa9d9c13d150c54b78eb621b8a0435fcb694

    • SSDEEP

      1536:pwWGhgYu9+7gWbrimfWSeJFzkRcTwdE1dIumgDL0FfxTGHzejyz4:pwKT8gWi2eJFzkRswZumgDLOfqze

    Score
    10/10
    evasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks