Overview

overview

10

Static

static

3

96f444835d...18.exe

windows7-x64

10

96f444835d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    96f444835d12064114698c0e744bbaa5_JaffaCakes118

  • Size

    152KB

  • Sample

    240814-vt3q6atepe

  • MD5

    96f444835d12064114698c0e744bbaa5

  • SHA1

    457fb914b5485bad5d5dff179df1d0ea447fd61e

  • SHA256

    be14b9bea81686111e2ccddd0740422769ddef945869bdb5b26b35d38e2e8c98

  • SHA512

    12ec9113756953454ead0421551f8af7a132c4683987b40e9324571e777d44b3afd23ea7c17b4844339a6b1939585874454a7023a07aea3dc765752b6636833b

  • SSDEEP

    3072:8bSzMr/Yt8wZfLOweRty9bWT4Nm4oQZiExY7:dzMrQ+YBeW96Tg6WHw

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      96f444835d12064114698c0e744bbaa5_JaffaCakes118

    • Size

      152KB

    • MD5

      96f444835d12064114698c0e744bbaa5

    • SHA1

      457fb914b5485bad5d5dff179df1d0ea447fd61e

    • SHA256

      be14b9bea81686111e2ccddd0740422769ddef945869bdb5b26b35d38e2e8c98

    • SHA512

      12ec9113756953454ead0421551f8af7a132c4683987b40e9324571e777d44b3afd23ea7c17b4844339a6b1939585874454a7023a07aea3dc765752b6636833b

    • SSDEEP

      3072:8bSzMr/Yt8wZfLOweRty9bWT4Nm4oQZiExY7:dzMrQ+YBeW96Tg6WHw

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks