Overview

overview

10

Static

static

3

b2d0dd74cf...18.exe

windows7-x64

10

b2d0dd74cf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b2d0dd74cf2428657c960c9a1a00a579_JaffaCakes118

  • Size

    168KB

  • Sample

    240821-kqb4xszale

  • MD5

    b2d0dd74cf2428657c960c9a1a00a579

  • SHA1

    d7b91f6c9f67e7fc3c2783dccbb48c545bcab1c0

  • SHA256

    60bfa2d01ed51ecf45e10351d16982d6983f92e75ea43f1d9d75fefff02c7570

  • SHA512

    9e6f23826b01eb0b7d035d917e00a0a920ae7d475aa4bb8c7fa123251953918302e5d5536b382b59e4e7cb934bb000ff15fb6dec8be6be48b7b291e0bea0976c

  • SSDEEP

    768:1gMUzhMnsEnBJNVVutayVpSQKjdbyo/SkL6fYYhXJwYMIifzEhELrmypL12:1gMMk7nFVDyxo/SkL6fxWFd0Ev9L12

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      b2d0dd74cf2428657c960c9a1a00a579_JaffaCakes118

    • Size

      168KB

    • MD5

      b2d0dd74cf2428657c960c9a1a00a579

    • SHA1

      d7b91f6c9f67e7fc3c2783dccbb48c545bcab1c0

    • SHA256

      60bfa2d01ed51ecf45e10351d16982d6983f92e75ea43f1d9d75fefff02c7570

    • SHA512

      9e6f23826b01eb0b7d035d917e00a0a920ae7d475aa4bb8c7fa123251953918302e5d5536b382b59e4e7cb934bb000ff15fb6dec8be6be48b7b291e0bea0976c

    • SSDEEP

      768:1gMUzhMnsEnBJNVVutayVpSQKjdbyo/SkL6fYYhXJwYMIifzEhELrmypL12:1gMMk7nFVDyxo/SkL6fxWFd0Ev9L12

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks