Overview

overview

10

Static

static

3

aef9334a4c...18.exe

windows7-x64

10

aef9334a4c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aef9334a4c675ca04c050597035b7cc7_JaffaCakes118

  • Size

    204KB

  • Sample

    240820-m65ghssbqq

  • MD5

    aef9334a4c675ca04c050597035b7cc7

  • SHA1

    115c00c6c401326ebbf3c4cf139d8d0f7329b5a7

  • SHA256

    1d3c807ab52ad6e84d8329327348ec6a41d75636e8b4fd79d70dca17019ee85f

  • SHA512

    94099d0adc718b6d6991653f8e895ed351488c14f1a50fd0b2f1be81c6fb7d1c3c69f5514af528707f845154d5501d4b4817fdc7960763d0c6d7c8669ff0183c

  • SSDEEP

    3072:zu/SBYSTWor5Jp0AisM/8jp6tdlWbRVslWQifgO4F0SlD4:z/TWqJ+RsM/8E/IbRuLifI0SW

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      aef9334a4c675ca04c050597035b7cc7_JaffaCakes118

    • Size

      204KB

    • MD5

      aef9334a4c675ca04c050597035b7cc7

    • SHA1

      115c00c6c401326ebbf3c4cf139d8d0f7329b5a7

    • SHA256

      1d3c807ab52ad6e84d8329327348ec6a41d75636e8b4fd79d70dca17019ee85f

    • SHA512

      94099d0adc718b6d6991653f8e895ed351488c14f1a50fd0b2f1be81c6fb7d1c3c69f5514af528707f845154d5501d4b4817fdc7960763d0c6d7c8669ff0183c

    • SSDEEP

      3072:zu/SBYSTWor5Jp0AisM/8jp6tdlWbRVslWQifgO4F0SlD4:z/TWqJ+RsM/8E/IbRuLifI0SW

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks