Overview

overview

10

Static

static

3

dcee57677b...18.exe

windows7-x64

10

dcee57677b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dcee57677b33fa6132fa764a1c0980cf_JaffaCakes118

  • Size

    164KB

  • Sample

    240912-ygd4ta1fla

  • MD5

    dcee57677b33fa6132fa764a1c0980cf

  • SHA1

    94639549ed6d26be56b9f4f1078262545315b46d

  • SHA256

    a09304f4fd4bcbab7954da422c369705efe74283dcc8d1d824a579db63fb5d7f

  • SHA512

    56b606636c2ddd5943c92fb5688813a1b158ca18887c2fd61de889385bc56a782c2ef6286868e1970e367ccea188336c6160abf2dc18a9d8bd032afb1b40e203

  • SSDEEP

    768:EnX+sFPKp3vZ9TWMZ1RKPFmvRey8wZ/IJSd1dT76fYq9cbJPqMqbk4V3lFk40pDD:WXLFPA/RZ1wJl0qBV3lFkRR9H0o

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      dcee57677b33fa6132fa764a1c0980cf_JaffaCakes118

    • Size

      164KB

    • MD5

      dcee57677b33fa6132fa764a1c0980cf

    • SHA1

      94639549ed6d26be56b9f4f1078262545315b46d

    • SHA256

      a09304f4fd4bcbab7954da422c369705efe74283dcc8d1d824a579db63fb5d7f

    • SHA512

      56b606636c2ddd5943c92fb5688813a1b158ca18887c2fd61de889385bc56a782c2ef6286868e1970e367ccea188336c6160abf2dc18a9d8bd032afb1b40e203

    • SSDEEP

      768:EnX+sFPKp3vZ9TWMZ1RKPFmvRey8wZ/IJSd1dT76fYq9cbJPqMqbk4V3lFk40pDD:WXLFPA/RZ1wJl0qBV3lFkRR9H0o

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks