Overview

overview

10

Static

static

3

ea9a0415c9...18.exe

windows7-x64

10

ea9a0415c9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea9a0415c998ebe8445a95d760c91363_JaffaCakes118

  • Size

    228KB

  • Sample

    240919-fafd7a1fja

  • MD5

    ea9a0415c998ebe8445a95d760c91363

  • SHA1

    ae810fb429ff878ea07c1f2c3cf934e799e93890

  • SHA256

    19c1e32e12d93826b8920480d92977fc72b96289c20a436a17d810c528d97bf2

  • SHA512

    f41bd04fbc977001ae937930d22c0f5559724150f5b1e5d2658cabae60cd0657ef467f9529cf686e4030ed2df83646e617e5e8834e51d4afd53de4747d812e2c

  • SSDEEP

    6144:Ubzz3lZiu5dqmYN1v4579/piV1POH1f+9GolHSfHXovNvunQyMqtnh/wqJ:1

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ea9a0415c998ebe8445a95d760c91363_JaffaCakes118

    • Size

      228KB

    • MD5

      ea9a0415c998ebe8445a95d760c91363

    • SHA1

      ae810fb429ff878ea07c1f2c3cf934e799e93890

    • SHA256

      19c1e32e12d93826b8920480d92977fc72b96289c20a436a17d810c528d97bf2

    • SHA512

      f41bd04fbc977001ae937930d22c0f5559724150f5b1e5d2658cabae60cd0657ef467f9529cf686e4030ed2df83646e617e5e8834e51d4afd53de4747d812e2c

    • SSDEEP

      6144:Ubzz3lZiu5dqmYN1v4579/piV1POH1f+9GolHSfHXovNvunQyMqtnh/wqJ:1

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks