Overview

overview

10

Static

static

3

8d47c41585...18.exe

windows7-x64

10

8d47c41585...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8d47c4158536b8be3a9cdc90364ddc5f_JaffaCakes118

  • Size

    156KB

  • Sample

    240812-evmtbsvekj

  • MD5

    8d47c4158536b8be3a9cdc90364ddc5f

  • SHA1

    169e2051893a7563e5ba892afdf6ea89f1888e2b

  • SHA256

    3073c11619167d9687b8993a9718d43d663dc1f978a8c6115813f5cba7e14a7c

  • SHA512

    2c828aae5928815dc96b01d8c5b73c575b972c1a67de5cc46b52ab5dd5c3d18cbc9f7a75f5ac6afe069cc5ec01b92a539bf8a2f03c21c1ad7bd2822d5dfea9a3

  • SSDEEP

    1536:4QrFbyLPRsNLCNMSG5+SUdqeHAQWXZaNwRRczNoU1LbLkOVeaQ:jrxyVaZLBRWhlLOa

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      8d47c4158536b8be3a9cdc90364ddc5f_JaffaCakes118

    • Size

      156KB

    • MD5

      8d47c4158536b8be3a9cdc90364ddc5f

    • SHA1

      169e2051893a7563e5ba892afdf6ea89f1888e2b

    • SHA256

      3073c11619167d9687b8993a9718d43d663dc1f978a8c6115813f5cba7e14a7c

    • SHA512

      2c828aae5928815dc96b01d8c5b73c575b972c1a67de5cc46b52ab5dd5c3d18cbc9f7a75f5ac6afe069cc5ec01b92a539bf8a2f03c21c1ad7bd2822d5dfea9a3

    • SSDEEP

      1536:4QrFbyLPRsNLCNMSG5+SUdqeHAQWXZaNwRRczNoU1LbLkOVeaQ:jrxyVaZLBRWhlLOa

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks