Overview

overview

10

Static

static

3

867233ce03...18.exe

windows7-x64

10

867233ce03...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    867233ce032af632b1a50e573b5a0224_JaffaCakes118

  • Size

    232KB

  • Sample

    240810-rzzpxatdqp

  • MD5

    867233ce032af632b1a50e573b5a0224

  • SHA1

    8d13755a14389556d2e05cc782d70d0dbcfd3033

  • SHA256

    e368d51f2811396fca16da07be68205633e70f5a43b041a055bbe93633552c5c

  • SHA512

    29e0d5b490cec285dc96e85d58a2b6676aceb7e1985be615558925ded3fdda7bff8f46a9d2acd6c0a234218b6e33827494475c168f974406af815f1f1c003b31

  • SSDEEP

    6144:UB3PFKs78g2KyEOaWEqxF6snji81RUinKdNOm:wPh+mF

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      867233ce032af632b1a50e573b5a0224_JaffaCakes118

    • Size

      232KB

    • MD5

      867233ce032af632b1a50e573b5a0224

    • SHA1

      8d13755a14389556d2e05cc782d70d0dbcfd3033

    • SHA256

      e368d51f2811396fca16da07be68205633e70f5a43b041a055bbe93633552c5c

    • SHA512

      29e0d5b490cec285dc96e85d58a2b6676aceb7e1985be615558925ded3fdda7bff8f46a9d2acd6c0a234218b6e33827494475c168f974406af815f1f1c003b31

    • SSDEEP

      6144:UB3PFKs78g2KyEOaWEqxF6snji81RUinKdNOm:wPh+mF

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks