Overview

overview

10

Static

static

3

cead72877c...18.exe

windows7-x64

10

cead72877c...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cead72877cc8a8adb111b03fb7aaebec_JaffaCakes118

  • Size

    276KB

  • Sample

    240906-fajfvawhll

  • MD5

    cead72877cc8a8adb111b03fb7aaebec

  • SHA1

    fd7ad62bb6346c3b580d9bc1547920b956727ee7

  • SHA256

    934a963a207f930e5ea63e366b0fe7fde8a52c75d5ba718e13091d3f58db3886

  • SHA512

    0cb1f89fdc2221b5f0c7afccafe72b15dbfad78112dc2471c9deddaff5bf9fc456ee21828ea7da549b010b530a9d10868bd95f1555fb89e5d14e91a29fffcb9b

  • SSDEEP

    6144:teeuhRQaX/m7bfTWaxAQ9aLb+Kf6+2/MKsjh9Bqas5Ti3q/Vlgaz:tfuhRQaX/m7bfTWaVKf52/MKsjh90aQp

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      cead72877cc8a8adb111b03fb7aaebec_JaffaCakes118

    • Size

      276KB

    • MD5

      cead72877cc8a8adb111b03fb7aaebec

    • SHA1

      fd7ad62bb6346c3b580d9bc1547920b956727ee7

    • SHA256

      934a963a207f930e5ea63e366b0fe7fde8a52c75d5ba718e13091d3f58db3886

    • SHA512

      0cb1f89fdc2221b5f0c7afccafe72b15dbfad78112dc2471c9deddaff5bf9fc456ee21828ea7da549b010b530a9d10868bd95f1555fb89e5d14e91a29fffcb9b

    • SSDEEP

      6144:teeuhRQaX/m7bfTWaxAQ9aLb+Kf6+2/MKsjh9Bqas5Ti3q/Vlgaz:tfuhRQaX/m7bfTWaVKf52/MKsjh90aQp

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks