Overview

overview

10

Static

static

3

ed334cf3bf...18.exe

windows7-x64

10

ed334cf3bf...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed334cf3bf29649867a81754a4451b02_JaffaCakes118

  • Size

    216KB

  • Sample

    240920-kbm8msxbne

  • MD5

    ed334cf3bf29649867a81754a4451b02

  • SHA1

    c38dc38d1d0fcf0fd23317bc0ccf842b59ada1f3

  • SHA256

    adf640603f9c0fb125548e6dad5c04a27c05a531bcaa9fad8e809842dd737bb1

  • SHA512

    c0c2178c6aa2e830853f87e3a6368e6c3da5e24fec45bfe1f81910a59281339cf7c262c9fa8778f7a5e6280eb1cc2dadd8a7f5e92b9e04ea4154a7b25babd09c

  • SSDEEP

    6144:mlX0S7F+9rorhkPkr0bT0ckLaz/RJeIaAuiIv4wg9WNltq1QQIO7gTxZf/wD:ml3+9bT0ckLaz/RJeIaAuiIv4wFNltql

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ed334cf3bf29649867a81754a4451b02_JaffaCakes118

    • Size

      216KB

    • MD5

      ed334cf3bf29649867a81754a4451b02

    • SHA1

      c38dc38d1d0fcf0fd23317bc0ccf842b59ada1f3

    • SHA256

      adf640603f9c0fb125548e6dad5c04a27c05a531bcaa9fad8e809842dd737bb1

    • SHA512

      c0c2178c6aa2e830853f87e3a6368e6c3da5e24fec45bfe1f81910a59281339cf7c262c9fa8778f7a5e6280eb1cc2dadd8a7f5e92b9e04ea4154a7b25babd09c

    • SSDEEP

      6144:mlX0S7F+9rorhkPkr0bT0ckLaz/RJeIaAuiIv4wg9WNltq1QQIO7gTxZf/wD:ml3+9bT0ckLaz/RJeIaAuiIv4wFNltql

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks