Overview

overview

10

Static

static

3

ce3263e47b...18.exe

windows7-x64

10

ce3263e47b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ce3263e47b162a2a8d785e9429602955_JaffaCakes118

  • Size

    216KB

  • Sample

    240905-31hnkawarh

  • MD5

    ce3263e47b162a2a8d785e9429602955

  • SHA1

    d62155d4c12d97798c30a9e308106bdb69c74774

  • SHA256

    ce11e721b2764f4c3ff1ec6a6614093020f7b8d2f62c0172835143c31764a6d9

  • SHA512

    b60c3b557d51862c6042d2dc7514e5ed49b09e9732b11073f457b42521ae7f884c517c425124dc8b968c173bf64c5c895261be0772e9149951ed8b18d9146d65

  • SSDEEP

    3072:04Ozx5gnpOdmLGeCfcpwA5f3CEoEtUMbf6mPr:lOzmOK7cKiED5nr

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ce3263e47b162a2a8d785e9429602955_JaffaCakes118

    • Size

      216KB

    • MD5

      ce3263e47b162a2a8d785e9429602955

    • SHA1

      d62155d4c12d97798c30a9e308106bdb69c74774

    • SHA256

      ce11e721b2764f4c3ff1ec6a6614093020f7b8d2f62c0172835143c31764a6d9

    • SHA512

      b60c3b557d51862c6042d2dc7514e5ed49b09e9732b11073f457b42521ae7f884c517c425124dc8b968c173bf64c5c895261be0772e9149951ed8b18d9146d65

    • SSDEEP

      3072:04Ozx5gnpOdmLGeCfcpwA5f3CEoEtUMbf6mPr:lOzmOK7cKiED5nr

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks