Overview

overview

10

Static

static

3

bbfb3640a5...18.exe

windows7-x64

10

bbfb3640a5...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bbfb3640a58006e6ce5130be7df95de2_JaffaCakes118

  • Size

    168KB

  • Sample

    240823-q3skbszekq

  • MD5

    bbfb3640a58006e6ce5130be7df95de2

  • SHA1

    a1fda8281305a19fd89c3d58260762efa3f83ea6

  • SHA256

    f4cb226c4eb246f3cfb1650b5156c9af9f14585501cf98fded821d56a3df5d4b

  • SHA512

    85b285ede634ca228d2ad1ae623adf1c6f53fb50e9ccfa2e13ad2cb16c9e23afbbdd042c9931b1455580091a4cb87cc981e887da5db412e3eab047ece5ac9103

  • SSDEEP

    1536:2yP2Ru/W30f8kX8PsHy244nDUnBC2U6A:V2R7Ef8kX8PsHy244nDUnBC2c

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      bbfb3640a58006e6ce5130be7df95de2_JaffaCakes118

    • Size

      168KB

    • MD5

      bbfb3640a58006e6ce5130be7df95de2

    • SHA1

      a1fda8281305a19fd89c3d58260762efa3f83ea6

    • SHA256

      f4cb226c4eb246f3cfb1650b5156c9af9f14585501cf98fded821d56a3df5d4b

    • SHA512

      85b285ede634ca228d2ad1ae623adf1c6f53fb50e9ccfa2e13ad2cb16c9e23afbbdd042c9931b1455580091a4cb87cc981e887da5db412e3eab047ece5ac9103

    • SSDEEP

      1536:2yP2Ru/W30f8kX8PsHy244nDUnBC2U6A:V2R7Ef8kX8PsHy244nDUnBC2c

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks