Overview

overview

10

Static

static

3

ea9bb3a7c8...18.exe

windows7-x64

10

ea9bb3a7c8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea9bb3a7c8f0da6bf28b67be82343911_JaffaCakes118

  • Size

    156KB

  • Sample

    240919-fcq9ga1frc

  • MD5

    ea9bb3a7c8f0da6bf28b67be82343911

  • SHA1

    3c946b39f0b3689d0874263d0996ecb7355432e0

  • SHA256

    be247d3074bbd8205e255bb71c1e79379ce5efea0d1528c09e7856d6b38ce478

  • SHA512

    47afdec495ff50510cc4f2de83fb550ffae1e2fc247ff8f7fa345568f885b23ab7b34f44d7675690b73fc457d4c436309065b1a799e8b0025ff5c2493dc9c9d0

  • SSDEEP

    3072:8noxLF5OpMS7yJuu4TrVlpT3rZy93E3ipMdIyH+Y8DuALIXTe7E5j4oQ7:/x1fJuu4l3rZy93UipMd9+Y8DuZRd

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ea9bb3a7c8f0da6bf28b67be82343911_JaffaCakes118

    • Size

      156KB

    • MD5

      ea9bb3a7c8f0da6bf28b67be82343911

    • SHA1

      3c946b39f0b3689d0874263d0996ecb7355432e0

    • SHA256

      be247d3074bbd8205e255bb71c1e79379ce5efea0d1528c09e7856d6b38ce478

    • SHA512

      47afdec495ff50510cc4f2de83fb550ffae1e2fc247ff8f7fa345568f885b23ab7b34f44d7675690b73fc457d4c436309065b1a799e8b0025ff5c2493dc9c9d0

    • SSDEEP

      3072:8noxLF5OpMS7yJuu4TrVlpT3rZy93E3ipMdIyH+Y8DuALIXTe7E5j4oQ7:/x1fJuu4l3rZy93UipMd9+Y8DuZRd

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks