Overview

overview

10

Static

static

3

848d69ddbf...18.exe

windows7-x64

10

848d69ddbf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    848d69ddbfbceccdef37e6d30ffe4176_JaffaCakes118

  • Size

    132KB

  • Sample

    240810-de6e3asgnr

  • MD5

    848d69ddbfbceccdef37e6d30ffe4176

  • SHA1

    15df515002f1d0ae4a0dfcc6d46360fd5e0cbc8d

  • SHA256

    e75c0b3983af8b4189a66cd7e40e66677bb5343d59b15ee48049f5daa96bac1d

  • SHA512

    f568eb338524254ffd1bab4c907562431ba5976137a76764657e703b7bbce05a329bebe5ef4c775c32a5ebe6ab842bbc45eac515957c75802670a159d07a7fe5

  • SSDEEP

    3072:Jp7JovvXFwRBW1cQoj9MYuPCNtrK6tJTVUa37Ph5:pu/d2QRYjfTVU4Ph

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      848d69ddbfbceccdef37e6d30ffe4176_JaffaCakes118

    • Size

      132KB

    • MD5

      848d69ddbfbceccdef37e6d30ffe4176

    • SHA1

      15df515002f1d0ae4a0dfcc6d46360fd5e0cbc8d

    • SHA256

      e75c0b3983af8b4189a66cd7e40e66677bb5343d59b15ee48049f5daa96bac1d

    • SHA512

      f568eb338524254ffd1bab4c907562431ba5976137a76764657e703b7bbce05a329bebe5ef4c775c32a5ebe6ab842bbc45eac515957c75802670a159d07a7fe5

    • SSDEEP

      3072:Jp7JovvXFwRBW1cQoj9MYuPCNtrK6tJTVUa37Ph5:pu/d2QRYjfTVU4Ph

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks