Overview

overview

10

Static

static

3

d3bb3c871a...18.exe

windows7-x64

10

d3bb3c871a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3bb3c871a045fb100ab8b589a8c9499_JaffaCakes118

  • Size

    384KB

  • Sample

    240908-g3br5stape

  • MD5

    d3bb3c871a045fb100ab8b589a8c9499

  • SHA1

    9e568d839dd212915f4565890172b7b336a9aafc

  • SHA256

    aafbe46b34582c1af07c50da72a21219537c25927cf241ad60f4bff7b518a25b

  • SHA512

    fc98b76e804d33099bb674a81302e790bed413e32008c53ec61605dbd081105e1ad855950c926192fa2d4f29ec2bc29bf0ed62d9a0ce968dae26ea796f46d17a

  • SSDEEP

    6144:Ustj9IYdG6uM4a2TURdxDZ23w8QEoKHjWZLKBPvHIWMW:C7a9Z2A81vWpaPvD

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      d3bb3c871a045fb100ab8b589a8c9499_JaffaCakes118

    • Size

      384KB

    • MD5

      d3bb3c871a045fb100ab8b589a8c9499

    • SHA1

      9e568d839dd212915f4565890172b7b336a9aafc

    • SHA256

      aafbe46b34582c1af07c50da72a21219537c25927cf241ad60f4bff7b518a25b

    • SHA512

      fc98b76e804d33099bb674a81302e790bed413e32008c53ec61605dbd081105e1ad855950c926192fa2d4f29ec2bc29bf0ed62d9a0ce968dae26ea796f46d17a

    • SSDEEP

      6144:Ustj9IYdG6uM4a2TURdxDZ23w8QEoKHjWZLKBPvHIWMW:C7a9Z2A81vWpaPvD

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks