Overview

overview

10

Static

static

3

ece34bb15b...18.exe

windows7-x64

10

ece34bb15b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ece34bb15bf1911484b7e0b7d0dbb4c5_JaffaCakes118

  • Size

    132KB

  • Sample

    240920-fnk7lazgnk

  • MD5

    ece34bb15bf1911484b7e0b7d0dbb4c5

  • SHA1

    512dbceb8cf213788ee9ea1a670e18e41d5ef1a0

  • SHA256

    6648c3c4db62c89ad4528c6570f582f5ce1d92cf3e70e347d9370bf8f50d4d03

  • SHA512

    988180e301215dd71cd46926ef20edbdcca66b42201c34e5977ec56b9629eacde270fc78864654feed203a885bc0eb1279b928f1e50dca14c98c71f3da03e2e6

  • SSDEEP

    3072:0fDYbtX6RzvyuOi89Sey1AKWZXl7miWmn/AoQ:0fDOtX6RzvyuOQesWbScA

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ece34bb15bf1911484b7e0b7d0dbb4c5_JaffaCakes118

    • Size

      132KB

    • MD5

      ece34bb15bf1911484b7e0b7d0dbb4c5

    • SHA1

      512dbceb8cf213788ee9ea1a670e18e41d5ef1a0

    • SHA256

      6648c3c4db62c89ad4528c6570f582f5ce1d92cf3e70e347d9370bf8f50d4d03

    • SHA512

      988180e301215dd71cd46926ef20edbdcca66b42201c34e5977ec56b9629eacde270fc78864654feed203a885bc0eb1279b928f1e50dca14c98c71f3da03e2e6

    • SSDEEP

      3072:0fDYbtX6RzvyuOi89Sey1AKWZXl7miWmn/AoQ:0fDOtX6RzvyuOQesWbScA

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks