Overview

overview

10

Static

static

3

da209969c3...18.exe

windows7-x64

10

da209969c3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    da209969c33db24fa5c7116d2e7fd5bf_JaffaCakes118

  • Size

    228KB

  • Sample

    240911-mahmwawaja

  • MD5

    da209969c33db24fa5c7116d2e7fd5bf

  • SHA1

    db8a6bfa43908adddff9dccbd89fef9c514c8d2a

  • SHA256

    085c9edfbb616fb44d91832579d5d774955c69d090757bd98c6572993729c55f

  • SHA512

    0155ff48eae7b7a2b7abdcd7f2529e566243868481745d1aec1fcd4f190454c1a6e476711d3ec138e7be191131704612305513c62f112ed3eeac2458e94b9730

  • SSDEEP

    6144:MLGDh4jLt4NVcWgyGELwXiS8T+bbhn7aRjS5ZgBbfh:yGWntWyD1LiS8lS5ZIJ

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      da209969c33db24fa5c7116d2e7fd5bf_JaffaCakes118

    • Size

      228KB

    • MD5

      da209969c33db24fa5c7116d2e7fd5bf

    • SHA1

      db8a6bfa43908adddff9dccbd89fef9c514c8d2a

    • SHA256

      085c9edfbb616fb44d91832579d5d774955c69d090757bd98c6572993729c55f

    • SHA512

      0155ff48eae7b7a2b7abdcd7f2529e566243868481745d1aec1fcd4f190454c1a6e476711d3ec138e7be191131704612305513c62f112ed3eeac2458e94b9730

    • SSDEEP

      6144:MLGDh4jLt4NVcWgyGELwXiS8T+bbhn7aRjS5ZgBbfh:yGWntWyD1LiS8lS5ZIJ

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks