Overview

overview

10

Static

static

3

a63ffda5c3...18.exe

windows7-x64

10

a63ffda5c3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a63ffda5c34b80b656d6806369cf0ea6_JaffaCakes118

  • Size

    124KB

  • Sample

    240818-lf1vzazeqr

  • MD5

    a63ffda5c34b80b656d6806369cf0ea6

  • SHA1

    a8f1e818f0b43ed6083bbe17214df1d78140eae9

  • SHA256

    99cfa2573e1f9838cfcafec6de8c6b6075797c70a4d497f94b833efa6ec0d578

  • SHA512

    31829ea2bbd3660c6a168a96d691974f11bb7e62f3f77d8ae51d5eaa18915981199933c90923c3d78c9e3b542ec92c65c482d29f110160e3af2dde5189605c7e

  • SSDEEP

    1536:PcEPhwRZuuBxeDtMYHa27J14ltxporZ45i8NeG0h/E:UEPhwRckeV6gJ1uCt45OM

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      a63ffda5c34b80b656d6806369cf0ea6_JaffaCakes118

    • Size

      124KB

    • MD5

      a63ffda5c34b80b656d6806369cf0ea6

    • SHA1

      a8f1e818f0b43ed6083bbe17214df1d78140eae9

    • SHA256

      99cfa2573e1f9838cfcafec6de8c6b6075797c70a4d497f94b833efa6ec0d578

    • SHA512

      31829ea2bbd3660c6a168a96d691974f11bb7e62f3f77d8ae51d5eaa18915981199933c90923c3d78c9e3b542ec92c65c482d29f110160e3af2dde5189605c7e

    • SSDEEP

      1536:PcEPhwRZuuBxeDtMYHa27J14ltxporZ45i8NeG0h/E:UEPhwRckeV6gJ1uCt45OM

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks