Overview

overview

10

Static

static

3

78972f5ec9...18.exe

windows7-x64

10

78972f5ec9...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    78972f5ec976abf205969083caaf1207_JaffaCakes118

  • Size

    64KB

  • Sample

    240727-sj9qlsybkc

  • MD5

    78972f5ec976abf205969083caaf1207

  • SHA1

    0d538e5adac6ff4b0eba0ba6e350ee6b85b97ef6

  • SHA256

    33f367420f770510c9ca82fad0c191bae357f2b8c7ec8dd7dbe62916e9eed3c2

  • SHA512

    93a501d309feead73b49e4989dff251d6298cd7b5dc73aa3328fe0544056930c61e85ac73b07eaa45b07eb9474066bc637a7cd050d2887db4160002c041ba21f

  • SSDEEP

    1536:WyZMSZFvknTePMZd4k4kJJs4Romu/ZW+0Yju2YurL73gxX/N:xZMJnTeM4cJJs45sHiILj0F

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      78972f5ec976abf205969083caaf1207_JaffaCakes118

    • Size

      64KB

    • MD5

      78972f5ec976abf205969083caaf1207

    • SHA1

      0d538e5adac6ff4b0eba0ba6e350ee6b85b97ef6

    • SHA256

      33f367420f770510c9ca82fad0c191bae357f2b8c7ec8dd7dbe62916e9eed3c2

    • SHA512

      93a501d309feead73b49e4989dff251d6298cd7b5dc73aa3328fe0544056930c61e85ac73b07eaa45b07eb9474066bc637a7cd050d2887db4160002c041ba21f

    • SSDEEP

      1536:WyZMSZFvknTePMZd4k4kJJs4Romu/ZW+0Yju2YurL73gxX/N:xZMJnTeM4cJJs45sHiILj0F

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks