Overview

overview

10

Static

static

3

ee8a073b43...18.exe

windows7-x64

10

ee8a073b43...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee8a073b438d38ef324d93e15042695f_JaffaCakes118

  • Size

    116KB

  • Sample

    240920-2arywa1hlk

  • MD5

    ee8a073b438d38ef324d93e15042695f

  • SHA1

    c15d2dc3c510fab2933f6c43182465af53d5c9b2

  • SHA256

    d378eb093a543de9020db3d57703c4ad4a87df76a49e23d9f080ef40885511da

  • SHA512

    bc2c2eb95099591961d80f7c5af62176c40973b0cb8a4d569f971a5edd23ca572679c10aad4bb1c44213cb374392384a8ee4f345479d484efb0908140ae47fa0

  • SSDEEP

    1536:LJF0F/Bb5YBQXE7oapzje0d05lKp3U9LN+VfVeoVrVeBUNqI0x7LfPPfDd:1F0F/BlUtpzjiUErfPPfR

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ee8a073b438d38ef324d93e15042695f_JaffaCakes118

    • Size

      116KB

    • MD5

      ee8a073b438d38ef324d93e15042695f

    • SHA1

      c15d2dc3c510fab2933f6c43182465af53d5c9b2

    • SHA256

      d378eb093a543de9020db3d57703c4ad4a87df76a49e23d9f080ef40885511da

    • SHA512

      bc2c2eb95099591961d80f7c5af62176c40973b0cb8a4d569f971a5edd23ca572679c10aad4bb1c44213cb374392384a8ee4f345479d484efb0908140ae47fa0

    • SSDEEP

      1536:LJF0F/Bb5YBQXE7oapzje0d05lKp3U9LN+VfVeoVrVeBUNqI0x7LfPPfDd:1F0F/BlUtpzjiUErfPPfR

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks