Overview

overview

10

Static

static

3

9558f21fcc...18.exe

windows7-x64

10

9558f21fcc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9558f21fcc45168803250c871a7e1188_JaffaCakes118

  • Size

    132KB

  • Sample

    240814-kg12pasejh

  • MD5

    9558f21fcc45168803250c871a7e1188

  • SHA1

    bf6cf178216f7a39f40966e32bfef7a1b1ad9bfd

  • SHA256

    ef3a487f5d2eba5a206d1e9e244cf4db2178c7b3007f4b52d1889d08ed9664c5

  • SHA512

    71efb30e644dc8c65721b6c66b5fcde0f1a86a8817ab872c2951f404d379897f06068b074738562ebf71b99a9f483a902be77e9665d40fe12aebc6e325c1caad

  • SSDEEP

    1536:7GyxPpeTI+XFixXVG4e2JLBJ3Ue05znybzPe9j1wo7JaSU:SUpeTICFixFG4e1ybGBwQG

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      9558f21fcc45168803250c871a7e1188_JaffaCakes118

    • Size

      132KB

    • MD5

      9558f21fcc45168803250c871a7e1188

    • SHA1

      bf6cf178216f7a39f40966e32bfef7a1b1ad9bfd

    • SHA256

      ef3a487f5d2eba5a206d1e9e244cf4db2178c7b3007f4b52d1889d08ed9664c5

    • SHA512

      71efb30e644dc8c65721b6c66b5fcde0f1a86a8817ab872c2951f404d379897f06068b074738562ebf71b99a9f483a902be77e9665d40fe12aebc6e325c1caad

    • SSDEEP

      1536:7GyxPpeTI+XFixXVG4e2JLBJ3Ue05znybzPe9j1wo7JaSU:SUpeTICFixFG4e1ybGBwQG

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks