Overview

overview

10

Static

static

3

ecbc618e42...18.exe

windows7-x64

10

ecbc618e42...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecbc618e42daceb975ce22012e766ad7_JaffaCakes118

  • Size

    240KB

  • Sample

    240920-dslmtawamd

  • MD5

    ecbc618e42daceb975ce22012e766ad7

  • SHA1

    58b9d5776ee0d09d726d2771edae1081eb6144bb

  • SHA256

    765c8895ade1f06f6e4ab198120896fd22879fe2d4441220ec02066abfc83eff

  • SHA512

    f4785f629379ea61d82d747ae14e271d0f3279a11eccfeab29bf8bdd24e0f3940c369f0dad6ca45a88c4b923f2599710d3dc0d974412c19751a55404f8507723

  • SSDEEP

    6144:/U53dwqsNwemAB0EqxF6snji81RUinKchhyvSQ:AdQQJsK

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ecbc618e42daceb975ce22012e766ad7_JaffaCakes118

    • Size

      240KB

    • MD5

      ecbc618e42daceb975ce22012e766ad7

    • SHA1

      58b9d5776ee0d09d726d2771edae1081eb6144bb

    • SHA256

      765c8895ade1f06f6e4ab198120896fd22879fe2d4441220ec02066abfc83eff

    • SHA512

      f4785f629379ea61d82d747ae14e271d0f3279a11eccfeab29bf8bdd24e0f3940c369f0dad6ca45a88c4b923f2599710d3dc0d974412c19751a55404f8507723

    • SSDEEP

      6144:/U53dwqsNwemAB0EqxF6snji81RUinKchhyvSQ:AdQQJsK

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks