Overview

overview

10

Static

static

3

d5280effef...18.exe

windows7-x64

10

d5280effef...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d5280effef73b30251d77b33a4b5d698_JaffaCakes118

  • Size

    88KB

  • Sample

    240908-1tpgeszcqb

  • MD5

    d5280effef73b30251d77b33a4b5d698

  • SHA1

    7a50b1e4f1939e3f8bacd944522457a1976f296e

  • SHA256

    96887e9e7aeb0d271241b73173cb82c9d2e47dab2e657854d0bf88251fcc7a43

  • SHA512

    9021a291761de07eeb85a633883acf9cfbab61f9898804632a9b27ced23c4878ccd675609ed340c92a08ef865493fa66bac36ba64dc9de3da28c39a47547a09e

  • SSDEEP

    768:/DFIDMaddaqnObOasGEwU8Z1Rbe2kjEQJQ1H7a8zFkzqcwOZ9r:pIoriCU8Z1QjEQJecwOZd

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      d5280effef73b30251d77b33a4b5d698_JaffaCakes118

    • Size

      88KB

    • MD5

      d5280effef73b30251d77b33a4b5d698

    • SHA1

      7a50b1e4f1939e3f8bacd944522457a1976f296e

    • SHA256

      96887e9e7aeb0d271241b73173cb82c9d2e47dab2e657854d0bf88251fcc7a43

    • SHA512

      9021a291761de07eeb85a633883acf9cfbab61f9898804632a9b27ced23c4878ccd675609ed340c92a08ef865493fa66bac36ba64dc9de3da28c39a47547a09e

    • SSDEEP

      768:/DFIDMaddaqnObOasGEwU8Z1Rbe2kjEQJQ1H7a8zFkzqcwOZ9r:pIoriCU8Z1QjEQJecwOZd

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks