Overview

overview

10

Static

static

3

82140c76db...18.exe

windows7-x64

10

82140c76db...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82140c76db1ddb664c9cd917e7a85916_JaffaCakes118

  • Size

    204KB

  • Sample

    240801-216vqawbjg

  • MD5

    82140c76db1ddb664c9cd917e7a85916

  • SHA1

    ea48e01bb25ab4126a600a294284521bd5707abe

  • SHA256

    1c41861da87373bde2e4660778ce4e4dd29762d44196e7694adb2f35f8a90889

  • SHA512

    17dbd63b3030aba72552d6b51548ae31c76156e65b6a22195bf05fb4a9138019db3e76e6a5ca5952414f673293c910efa94b01e1e473a3d1ddd80c9d2d0bcf17

  • SSDEEP

    1536:IwN9d0HQ4zxHwxlxNy3tQ9CW5EZWHakMwP9W6uXNi9f1AWa11GBPIdRONd+w6ESK:FOHQ/0tQ9nLHbB9W+k9ZJgImCt/E

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      82140c76db1ddb664c9cd917e7a85916_JaffaCakes118

    • Size

      204KB

    • MD5

      82140c76db1ddb664c9cd917e7a85916

    • SHA1

      ea48e01bb25ab4126a600a294284521bd5707abe

    • SHA256

      1c41861da87373bde2e4660778ce4e4dd29762d44196e7694adb2f35f8a90889

    • SHA512

      17dbd63b3030aba72552d6b51548ae31c76156e65b6a22195bf05fb4a9138019db3e76e6a5ca5952414f673293c910efa94b01e1e473a3d1ddd80c9d2d0bcf17

    • SSDEEP

      1536:IwN9d0HQ4zxHwxlxNy3tQ9CW5EZWHakMwP9W6uXNi9f1AWa11GBPIdRONd+w6ESK:FOHQ/0tQ9nLHbB9W+k9ZJgImCt/E

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks