Overview

overview

7

Static

static

3

95b4ef1490...18.exe

windows7-x64

7

95b4ef1490...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    95b4ef1490b299a58e5118914632f247_JaffaCakes118

  • Size

    216KB

  • Sample

    240814-mgx15ssapm

  • MD5

    95b4ef1490b299a58e5118914632f247

  • SHA1

    c8edfd3f474b752ae496be029a4633f37900758a

  • SHA256

    cac7477689fedde9009b79331904abfe1fc729dbb58fa3589679f027d6e24f5f

  • SHA512

    1c937cc9454d5f6ea4c48bce5846bb0b2f2e252b0497db3269e636787896993e0524b7ed425b91dace2b414c6143e6033271ad1c5acbbc6c29dfdaf0053d6a6f

  • SSDEEP

    3072:tXIWBRyR922YBBsU9KfkJI3/1MgiH9c1tkanMca+A75jazxCafv35O1k:tXIiRE222BsUgD3/s2Vnjs5+x1fB8

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      95b4ef1490b299a58e5118914632f247_JaffaCakes118

    • Size

      216KB

    • MD5

      95b4ef1490b299a58e5118914632f247

    • SHA1

      c8edfd3f474b752ae496be029a4633f37900758a

    • SHA256

      cac7477689fedde9009b79331904abfe1fc729dbb58fa3589679f027d6e24f5f

    • SHA512

      1c937cc9454d5f6ea4c48bce5846bb0b2f2e252b0497db3269e636787896993e0524b7ed425b91dace2b414c6143e6033271ad1c5acbbc6c29dfdaf0053d6a6f

    • SSDEEP

      3072:tXIWBRyR922YBBsU9KfkJI3/1MgiH9c1tkanMca+A75jazxCafv35O1k:tXIiRE222BsUgD3/s2Vnjs5+x1fB8

    Score
    7/10
    discoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks