Overview

overview

10

Static

static

3

75a70ae78f...18.exe

windows7-x64

10

75a70ae78f...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    75a70ae78fe5be52f707ad7f0b2d877b_JaffaCakes118

  • Size

    124KB

  • Sample

    240726-zjyfxaxaqa

  • MD5

    75a70ae78fe5be52f707ad7f0b2d877b

  • SHA1

    55dfea479e98cf8b9c84eb02386b7823200dad83

  • SHA256

    816bb614fe9502d5588bbb04482cfa100bb574e9b5f0c172b606ac5cbc3fe1cb

  • SHA512

    a513776720b6241c5840af1f33e27b64cefbe5bff9353b6b1d54ef174a91cb3eb2a433794b4505824e67f7aa9afde1538c4fd3e98d4a60e075ee1b412bb63077

  • SSDEEP

    1536:wyE64wRdz8YuBxLDtVdHa27J14lWxporZ45igkNeG0h3:DE64wRh8YkLt6gJ1uPt45Vz3

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      75a70ae78fe5be52f707ad7f0b2d877b_JaffaCakes118

    • Size

      124KB

    • MD5

      75a70ae78fe5be52f707ad7f0b2d877b

    • SHA1

      55dfea479e98cf8b9c84eb02386b7823200dad83

    • SHA256

      816bb614fe9502d5588bbb04482cfa100bb574e9b5f0c172b606ac5cbc3fe1cb

    • SHA512

      a513776720b6241c5840af1f33e27b64cefbe5bff9353b6b1d54ef174a91cb3eb2a433794b4505824e67f7aa9afde1538c4fd3e98d4a60e075ee1b412bb63077

    • SSDEEP

      1536:wyE64wRdz8YuBxLDtVdHa27J14lWxporZ45igkNeG0h3:DE64wRh8YkLt6gJ1uPt45Vz3

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks