Overview

overview

10

Static

static

3

bc0764fab9...18.exe

windows7-x64

10

bc0764fab9...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bc0764fab9e586b0ae4e59a26ce3a954_JaffaCakes118

  • Size

    88KB

  • Sample

    240823-rclvjayane

  • MD5

    bc0764fab9e586b0ae4e59a26ce3a954

  • SHA1

    cee782e4a5aa89e7b9d8c702775d497b372603ee

  • SHA256

    f071790e510f10b2a40f3bc3c0cdda5fe8c6ea3914aedce366620d0e32272022

  • SHA512

    a5bf50db3a479c7f2b681465d2803bf06b8149ebae3b35d7c0d05d9ec42b3b2dfd802d359c15bc2ff85733bbafa8c480892a9db74bdc400ef86e696a5a46e2c9

  • SSDEEP

    768:ZtsceqCgcCvPi7Wx8SRl5HcJR0t20rdg8hUPjvY4dW4dsoeKpAdDY4BO0BCZc/UW:rjeOi7K1RPnQpBeCZk1

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      bc0764fab9e586b0ae4e59a26ce3a954_JaffaCakes118

    • Size

      88KB

    • MD5

      bc0764fab9e586b0ae4e59a26ce3a954

    • SHA1

      cee782e4a5aa89e7b9d8c702775d497b372603ee

    • SHA256

      f071790e510f10b2a40f3bc3c0cdda5fe8c6ea3914aedce366620d0e32272022

    • SHA512

      a5bf50db3a479c7f2b681465d2803bf06b8149ebae3b35d7c0d05d9ec42b3b2dfd802d359c15bc2ff85733bbafa8c480892a9db74bdc400ef86e696a5a46e2c9

    • SSDEEP

      768:ZtsceqCgcCvPi7Wx8SRl5HcJR0t20rdg8hUPjvY4dW4dsoeKpAdDY4BO0BCZc/UW:rjeOi7K1RPnQpBeCZk1

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks