Overview

overview

10

Static

static

3

edb69ed8a0...18.exe

windows7-x64

10

edb69ed8a0...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    edb69ed8a07a1aa888321f0e815cad63_JaffaCakes118

  • Size

    132KB

  • Sample

    240920-qzyxyazbrr

  • MD5

    edb69ed8a07a1aa888321f0e815cad63

  • SHA1

    bcab5d82477fcdd1d53898ece124a21d3f4d972b

  • SHA256

    2c6cb28da884f60830111d98ed5facfabbf091c8d3ab2f2d1722b639c217a206

  • SHA512

    d32fc25e740b7d52b75cb6f364acf0a164d2392ea2957f5819e26b05425979ada66a1c03f8830f92c3362f29b5dde4cabb985e84a6613936c18a2cccee71dfbc

  • SSDEEP

    3072:0foYbtX6RzvyuOi89Sey1AKWZXl7miWmn/Aoa:0foOtX6RzvyuOQesWbScA

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      edb69ed8a07a1aa888321f0e815cad63_JaffaCakes118

    • Size

      132KB

    • MD5

      edb69ed8a07a1aa888321f0e815cad63

    • SHA1

      bcab5d82477fcdd1d53898ece124a21d3f4d972b

    • SHA256

      2c6cb28da884f60830111d98ed5facfabbf091c8d3ab2f2d1722b639c217a206

    • SHA512

      d32fc25e740b7d52b75cb6f364acf0a164d2392ea2957f5819e26b05425979ada66a1c03f8830f92c3362f29b5dde4cabb985e84a6613936c18a2cccee71dfbc

    • SSDEEP

      3072:0foYbtX6RzvyuOi89Sey1AKWZXl7miWmn/Aoa:0foOtX6RzvyuOQesWbScA

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks