Overview

overview

10

Static

static

3

a196aee0cf...18.exe

windows7-x64

10

a196aee0cf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a196aee0cf015204aa0401eb2524d823_JaffaCakes118

  • Size

    124KB

  • Sample

    240817-hrrjwssglb

  • MD5

    a196aee0cf015204aa0401eb2524d823

  • SHA1

    1b093c4f3cc7719892c840db4498562884aa6ddc

  • SHA256

    880ac76cec600901ec6e52eebe6568d6d934e6696941c88ad0c01b43d2e7bb73

  • SHA512

    5b5c06aa83f6a773bc611d75fcb66976d6d4ede82a4b761c1c4e389ecbe0848b08c4b40401ddb43b71bb0ecc6a9b795cc79cb2fb2deed117055d8c2fb3013ca0

  • SSDEEP

    1536:tUEAhwRH5uBxeDtMYHa27J14ltxporZ45i8NeG0h/E:eEAhwRH5keV6gJ1uCt45OM

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      a196aee0cf015204aa0401eb2524d823_JaffaCakes118

    • Size

      124KB

    • MD5

      a196aee0cf015204aa0401eb2524d823

    • SHA1

      1b093c4f3cc7719892c840db4498562884aa6ddc

    • SHA256

      880ac76cec600901ec6e52eebe6568d6d934e6696941c88ad0c01b43d2e7bb73

    • SHA512

      5b5c06aa83f6a773bc611d75fcb66976d6d4ede82a4b761c1c4e389ecbe0848b08c4b40401ddb43b71bb0ecc6a9b795cc79cb2fb2deed117055d8c2fb3013ca0

    • SSDEEP

      1536:tUEAhwRH5uBxeDtMYHa27J14ltxporZ45i8NeG0h/E:eEAhwRH5keV6gJ1uCt45OM

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks