Overview

overview

10

Static

static

3

68a6f0e447...18.exe

windows7-x64

10

68a6f0e447...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    68a6f0e447ec65999737f529b6b77165_JaffaCakes118

  • Size

    296KB

  • Sample

    240723-ydbjhstgnp

  • MD5

    68a6f0e447ec65999737f529b6b77165

  • SHA1

    c84239d65a46e19803b2d537f0cf7c658c14a92c

  • SHA256

    220df7db63cb7fed57cdfa203b1bc4ac1018a009056bc64abff931171414e8fd

  • SHA512

    7c66651a31c72dd6ff0cb1815957d3532923f0e678affda145d598a686fff3d7d9928c7a0c4ab2c8394e230dce6fc9c970cb8d5d6d00374559b28275ab6eed93

  • SSDEEP

    3072:nKYmK9FZsMIJqOifVqfzW8xfu3YOUtCPgCr0bM2C2VxZx89bRsVM8fnkTgFGY4t+:nK1eAiyG0s0bM2CEDV+8fnk1tEU

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      68a6f0e447ec65999737f529b6b77165_JaffaCakes118

    • Size

      296KB

    • MD5

      68a6f0e447ec65999737f529b6b77165

    • SHA1

      c84239d65a46e19803b2d537f0cf7c658c14a92c

    • SHA256

      220df7db63cb7fed57cdfa203b1bc4ac1018a009056bc64abff931171414e8fd

    • SHA512

      7c66651a31c72dd6ff0cb1815957d3532923f0e678affda145d598a686fff3d7d9928c7a0c4ab2c8394e230dce6fc9c970cb8d5d6d00374559b28275ab6eed93

    • SSDEEP

      3072:nKYmK9FZsMIJqOifVqfzW8xfu3YOUtCPgCr0bM2C2VxZx89bRsVM8fnkTgFGY4t+:nK1eAiyG0s0bM2CEDV+8fnk1tEU

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks