Overview

overview

10

Static

static

3

8c9ef366ae...18.exe

windows7-x64

10

8c9ef366ae...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c9ef366ae9c685e068070a2b932c07d_JaffaCakes118

  • Size

    100KB

  • Sample

    240812-axtmfawhlp

  • MD5

    8c9ef366ae9c685e068070a2b932c07d

  • SHA1

    ebeb7d3c06f42792cc9098e3b56bf0178b13b137

  • SHA256

    915f24c32aeea407aed6f8b9c8158ea3afb83bed237052411122492493538fd7

  • SHA512

    4508161e63cea180e758c59afd242bf09ffc8e20ce95f09dedbe69899acc1c548df6316d1ed293247f4d2aa1b161f963016c211e7e1cd43d2a45ea96aee1b191

  • SSDEEP

    1536:Ifp8iAuismyws9Lw0wF9MGM9K/oKtNgCMbA1bL3N+NM5Uf1NIjnZj:U9/KLOM52Cnx

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      8c9ef366ae9c685e068070a2b932c07d_JaffaCakes118

    • Size

      100KB

    • MD5

      8c9ef366ae9c685e068070a2b932c07d

    • SHA1

      ebeb7d3c06f42792cc9098e3b56bf0178b13b137

    • SHA256

      915f24c32aeea407aed6f8b9c8158ea3afb83bed237052411122492493538fd7

    • SHA512

      4508161e63cea180e758c59afd242bf09ffc8e20ce95f09dedbe69899acc1c548df6316d1ed293247f4d2aa1b161f963016c211e7e1cd43d2a45ea96aee1b191

    • SSDEEP

      1536:Ifp8iAuismyws9Lw0wF9MGM9K/oKtNgCMbA1bL3N+NM5Uf1NIjnZj:U9/KLOM52Cnx

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks