Overview

overview

10

Static

static

3

c83ec71161...18.exe

windows7-x64

10

c83ec71161...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c83ec71161add6e5089a518971248f18_JaffaCakes118

  • Size

    124KB

  • Sample

    240829-ffkk4awelr

  • MD5

    c83ec71161add6e5089a518971248f18

  • SHA1

    96b1a6fe313406d8d76ab327791102b3d12967fa

  • SHA256

    4226be8cd012eb79ea11cdcea3c3ed0ab523923fccbdc58f11425b10f2a7ba51

  • SHA512

    ee075d8dff8c5a2b21a362832e02b322806b8e4d2a4623ad7b5ecc4e40b2e09b1e7ce70e85734632e6057c334494fa04974915312d5d13c1b581f795ebe494d8

  • SSDEEP

    3072:aaAfUEiXrQKGcNqnGrD6uvIepyJS6f1qreY:ahfiXrQKGciwQJr

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      c83ec71161add6e5089a518971248f18_JaffaCakes118

    • Size

      124KB

    • MD5

      c83ec71161add6e5089a518971248f18

    • SHA1

      96b1a6fe313406d8d76ab327791102b3d12967fa

    • SHA256

      4226be8cd012eb79ea11cdcea3c3ed0ab523923fccbdc58f11425b10f2a7ba51

    • SHA512

      ee075d8dff8c5a2b21a362832e02b322806b8e4d2a4623ad7b5ecc4e40b2e09b1e7ce70e85734632e6057c334494fa04974915312d5d13c1b581f795ebe494d8

    • SSDEEP

      3072:aaAfUEiXrQKGcNqnGrD6uvIepyJS6f1qreY:ahfiXrQKGciwQJr

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks