Overview

overview

10

Static

static

3

ecde001550...18.exe

windows7-x64

10

ecde001550...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ecde001550514216c0a91e12bba4de55_JaffaCakes118

  • Size

    184KB

  • Sample

    240920-feqeysyhmh

  • MD5

    ecde001550514216c0a91e12bba4de55

  • SHA1

    a954f9a0aa085ed90f34b5d5b27340e49df3f46c

  • SHA256

    14822266a47876d3e6770238f2941a087a4076381a9e9020947408e8a353599b

  • SHA512

    50481ea523f5c9dfb32e15f924ea1c59a433e9a9d585b7b7531f1d585cdf5b9bd8de1697cfb362fd8eb08edfcf3864310ab4b1e57950bd816efaceb5ad0ae7d6

  • SSDEEP

    3072:FI5kBR9YUdtG716ennADVeMfcRAGKB+uMTEd1CT:FiGu1tnADVhERAGKB+uSEd

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ecde001550514216c0a91e12bba4de55_JaffaCakes118

    • Size

      184KB

    • MD5

      ecde001550514216c0a91e12bba4de55

    • SHA1

      a954f9a0aa085ed90f34b5d5b27340e49df3f46c

    • SHA256

      14822266a47876d3e6770238f2941a087a4076381a9e9020947408e8a353599b

    • SHA512

      50481ea523f5c9dfb32e15f924ea1c59a433e9a9d585b7b7531f1d585cdf5b9bd8de1697cfb362fd8eb08edfcf3864310ab4b1e57950bd816efaceb5ad0ae7d6

    • SSDEEP

      3072:FI5kBR9YUdtG716ennADVeMfcRAGKB+uMTEd1CT:FiGu1tnADVhERAGKB+uSEd

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks