Overview

overview

10

Static

static

3

ecc67a87fa...18.exe

windows7-x64

10

ecc67a87fa...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecc67a87fa74712efd1aa2a9dd3006b6_JaffaCakes118

  • Size

    232KB

  • Sample

    240920-d8zvdawgnh

  • MD5

    ecc67a87fa74712efd1aa2a9dd3006b6

  • SHA1

    20ceaa7b7ed6249866539d99cb46dc353498b6f1

  • SHA256

    3c3933debd105edfd7103c7ddef7510f9d75b76bf67f685cba7f0486ef4632d1

  • SHA512

    3ecf9132d7c776e2a9c25181e17aca938008351bc655b9eb2c22fa381e8a38f2c216c37f60026c60f762b2cf0a972c2ed76a7d6368bd8dc5c1c671a51fa20e08

  • SSDEEP

    3072:spMeBc1YwN1Smm727IJCkvIwXX4Ph0ApMXyKKl+Hv/91I/2X3lDD:spPBc1YwN1S327Y54Ph0TXQkd18C3

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ecc67a87fa74712efd1aa2a9dd3006b6_JaffaCakes118

    • Size

      232KB

    • MD5

      ecc67a87fa74712efd1aa2a9dd3006b6

    • SHA1

      20ceaa7b7ed6249866539d99cb46dc353498b6f1

    • SHA256

      3c3933debd105edfd7103c7ddef7510f9d75b76bf67f685cba7f0486ef4632d1

    • SHA512

      3ecf9132d7c776e2a9c25181e17aca938008351bc655b9eb2c22fa381e8a38f2c216c37f60026c60f762b2cf0a972c2ed76a7d6368bd8dc5c1c671a51fa20e08

    • SSDEEP

      3072:spMeBc1YwN1Smm727IJCkvIwXX4Ph0ApMXyKKl+Hv/91I/2X3lDD:spPBc1YwN1S327Y54Ph0TXQkd18C3

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks