Overview

overview

10

Static

static

3

67fa89250d...18.exe

windows7-x64

10

67fa89250d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67fa89250d46fd5d66a48f245bd6611a_JaffaCakes118

  • Size

    108KB

  • Sample

    240723-r1tv2syapb

  • MD5

    67fa89250d46fd5d66a48f245bd6611a

  • SHA1

    711c9f299ff7494227157ee7b63c3e20dbc27553

  • SHA256

    5ec6b78f83cadc1071dbc4224d1825514d5655e742dc034a397c799f46153f47

  • SHA512

    9e6725e9f870991b6bc0d3ba55c6f159acdcf2aa897541aacb4e4ea768cf4d70221e758c9b756dd73d89cad6e126da2c279478aa8702102629698a4c783dd476

  • SSDEEP

    1536:0nX/V5Bjes5mBVKuCrENMRs7IOLwhJt5G35Xm4ofWmkVpgWKBjWSKM8IVbnOhalw:kX/dQCs7IkWyQCnoM

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      67fa89250d46fd5d66a48f245bd6611a_JaffaCakes118

    • Size

      108KB

    • MD5

      67fa89250d46fd5d66a48f245bd6611a

    • SHA1

      711c9f299ff7494227157ee7b63c3e20dbc27553

    • SHA256

      5ec6b78f83cadc1071dbc4224d1825514d5655e742dc034a397c799f46153f47

    • SHA512

      9e6725e9f870991b6bc0d3ba55c6f159acdcf2aa897541aacb4e4ea768cf4d70221e758c9b756dd73d89cad6e126da2c279478aa8702102629698a4c783dd476

    • SSDEEP

      1536:0nX/V5Bjes5mBVKuCrENMRs7IOLwhJt5G35Xm4ofWmkVpgWKBjWSKM8IVbnOhalw:kX/dQCs7IkWyQCnoM

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks