Overview

overview

10

Static

static

3

c7c2eeac94...18.exe

windows7-x64

10

c7c2eeac94...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c7c2eeac940a2089fccb294c34aa4b7c_JaffaCakes118

  • Size

    124KB

  • Sample

    240828-2dt8eazclf

  • MD5

    c7c2eeac940a2089fccb294c34aa4b7c

  • SHA1

    983845e2174ec6d88a06d4419abe77f26c6b6d90

  • SHA256

    3149217d6ae2a904e63d45cdd36576c271d62d800d3ab16ebecaa08a049ee98b

  • SHA512

    129ff470ed4d5363d6d829879c7da01015e8f2aaf95d07b3bae0962757e54b8d626e73b263b0cc66b11b1915d3d3682b95010eb6bcc839c64f9fb41b5b86bb83

  • SSDEEP

    1536:cXtkj1/lHTQcCVU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VeMNeG0h/E:gkjn0lU0GgAT9gM

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      c7c2eeac940a2089fccb294c34aa4b7c_JaffaCakes118

    • Size

      124KB

    • MD5

      c7c2eeac940a2089fccb294c34aa4b7c

    • SHA1

      983845e2174ec6d88a06d4419abe77f26c6b6d90

    • SHA256

      3149217d6ae2a904e63d45cdd36576c271d62d800d3ab16ebecaa08a049ee98b

    • SHA512

      129ff470ed4d5363d6d829879c7da01015e8f2aaf95d07b3bae0962757e54b8d626e73b263b0cc66b11b1915d3d3682b95010eb6bcc839c64f9fb41b5b86bb83

    • SSDEEP

      1536:cXtkj1/lHTQcCVU0GgAJa0P1kNmKldCMhdu8KWP/nTn8nBP9VeMNeG0h/E:gkjn0lU0GgAT9gM

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks