Overview

overview

10

Static

static

3

ecbb700f74...18.exe

windows7-x64

10

ecbb700f74...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecbb700f74ab22b4d0a3aa49b73ee130_JaffaCakes118

  • Size

    232KB

  • Sample

    240920-dqt66swdqq

  • MD5

    ecbb700f74ab22b4d0a3aa49b73ee130

  • SHA1

    0061be6dfdeb1dbf30d0a2912dcef99022e6bf4b

  • SHA256

    cbdac9956d43aa150297aa30429be024b5726d7506068be30e4e37fd0acdd95f

  • SHA512

    947b369cd1d7384739fd41e4fa91fc83d12b31c16ed2aaaf54f6bc10a7b607935f42472cf28a438b7fb869dc61776f4dcdcd09d3c158c26e9d8d6e2726138a63

  • SSDEEP

    6144:U3PFKs7diixRSFBfWEqxF6snji81RUinK51jbkxkuq/:OPhJuBXVbkxJq/

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ecbb700f74ab22b4d0a3aa49b73ee130_JaffaCakes118

    • Size

      232KB

    • MD5

      ecbb700f74ab22b4d0a3aa49b73ee130

    • SHA1

      0061be6dfdeb1dbf30d0a2912dcef99022e6bf4b

    • SHA256

      cbdac9956d43aa150297aa30429be024b5726d7506068be30e4e37fd0acdd95f

    • SHA512

      947b369cd1d7384739fd41e4fa91fc83d12b31c16ed2aaaf54f6bc10a7b607935f42472cf28a438b7fb869dc61776f4dcdcd09d3c158c26e9d8d6e2726138a63

    • SSDEEP

      6144:U3PFKs7diixRSFBfWEqxF6snji81RUinK51jbkxkuq/:OPhJuBXVbkxJq/

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks