Overview

overview

10

Static

static

3

ed8822af33...18.exe

windows7-x64

10

ed8822af33...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ed8822af3361fa455687a753f5f91c74_JaffaCakes118

  • Size

    204KB

  • Sample

    240920-n4rnbavdpc

  • MD5

    ed8822af3361fa455687a753f5f91c74

  • SHA1

    9483c51cc53182aeafccab0ed184edf54d2d5630

  • SHA256

    7cfa81ca2d4d5bf3cebe85b11f7f7e262a5b9517be88f0ef131ad4a6ed4b7126

  • SHA512

    3a9559d9bf626c54d74aeb178f3782527a05ec0f68f3257693ab1d0a79162b459947338b8a3a39752639259efdcf213b9b22341147c98ed57097e3f7afc0c6f8

  • SSDEEP

    3072:NVeBC/Np8U+mzihKh8wpzDqulR3X9sDpLg6ZGKIXeYnVlDY:NVexEV82llbs1g6+XbVS

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ed8822af3361fa455687a753f5f91c74_JaffaCakes118

    • Size

      204KB

    • MD5

      ed8822af3361fa455687a753f5f91c74

    • SHA1

      9483c51cc53182aeafccab0ed184edf54d2d5630

    • SHA256

      7cfa81ca2d4d5bf3cebe85b11f7f7e262a5b9517be88f0ef131ad4a6ed4b7126

    • SHA512

      3a9559d9bf626c54d74aeb178f3782527a05ec0f68f3257693ab1d0a79162b459947338b8a3a39752639259efdcf213b9b22341147c98ed57097e3f7afc0c6f8

    • SSDEEP

      3072:NVeBC/Np8U+mzihKh8wpzDqulR3X9sDpLg6ZGKIXeYnVlDY:NVexEV82llbs1g6+XbVS

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks