Overview

overview

10

Static

static

3

a6140ea94f...18.exe

windows7-x64

10

a6140ea94f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a6140ea94f3369840d411f33f309992c_JaffaCakes118

  • Size

    28KB

  • Sample

    240818-kd8mcsvdnc

  • MD5

    a6140ea94f3369840d411f33f309992c

  • SHA1

    80329d3aa7949b7d7bbb79ad307ea3b5cc6401b4

  • SHA256

    8cd5079cbcb4f1d7483752ec7574b255acb9d7c9804e7943cab2e8b399e31132

  • SHA512

    c8fd9d2a6a4e684f4229899a4d5224a70a86e9f5844447cb50d66ac51301f9e9a519528cfcce547b7ab8fc656412c281666a327583f8ce72c07e260ba658d082

  • SSDEEP

    768:LP6ARLjHBv4fp1x0uSLFUoVb8me6RANF5J33ShQj9gitfufI430zDzYcCe:Llv4fpf0rZBVb7YFj33Vj9gitfub0zR

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      a6140ea94f3369840d411f33f309992c_JaffaCakes118

    • Size

      28KB

    • MD5

      a6140ea94f3369840d411f33f309992c

    • SHA1

      80329d3aa7949b7d7bbb79ad307ea3b5cc6401b4

    • SHA256

      8cd5079cbcb4f1d7483752ec7574b255acb9d7c9804e7943cab2e8b399e31132

    • SHA512

      c8fd9d2a6a4e684f4229899a4d5224a70a86e9f5844447cb50d66ac51301f9e9a519528cfcce547b7ab8fc656412c281666a327583f8ce72c07e260ba658d082

    • SSDEEP

      768:LP6ARLjHBv4fp1x0uSLFUoVb8me6RANF5J33ShQj9gitfufI430zDzYcCe:Llv4fpf0rZBVb7YFj33Vj9gitfub0zR

    Score
    10/10
    evasionpersistencetrojan

    • Modifies WinLogon for persistence

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks