Overview

overview

10

Static

static

3

c8181919b0...18.exe

windows7-x64

10

c8181919b0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c8181919b0019dc457682264453ccb82_JaffaCakes118

  • Size

    216KB

  • Sample

    240829-c7nv2s1hmj

  • MD5

    c8181919b0019dc457682264453ccb82

  • SHA1

    f466ce365077889183d8afc5535503b4e539c9a9

  • SHA256

    ee1ee3cff529f75b1a0c1bff717d7903cd255073bf723c09cfefb8ace236857b

  • SHA512

    dd38d99169b4e353842dadc9316dad9233bbff9767a2f6fa7b3e9f2a66e0d226e856dac5b8cc748ba783e16e40263694fe6bc1336b74d520ff5c1f11692085ec

  • SSDEEP

    3072:W07Li5xxe705cmpH8ijBcS6iS/bO40nN9k+s7EeHQbKY06Ax:W07qDEHmpcyWX3/640N9kLjp

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      c8181919b0019dc457682264453ccb82_JaffaCakes118

    • Size

      216KB

    • MD5

      c8181919b0019dc457682264453ccb82

    • SHA1

      f466ce365077889183d8afc5535503b4e539c9a9

    • SHA256

      ee1ee3cff529f75b1a0c1bff717d7903cd255073bf723c09cfefb8ace236857b

    • SHA512

      dd38d99169b4e353842dadc9316dad9233bbff9767a2f6fa7b3e9f2a66e0d226e856dac5b8cc748ba783e16e40263694fe6bc1336b74d520ff5c1f11692085ec

    • SSDEEP

      3072:W07Li5xxe705cmpH8ijBcS6iS/bO40nN9k+s7EeHQbKY06Ax:W07qDEHmpcyWX3/640N9kLjp

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks