Overview

overview

10

Static

static

3

ede8103338...18.exe

windows7-x64

10

ede8103338...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ede8103338b9a5d04cc6bf85eff437ba_JaffaCakes118

  • Size

    288KB

  • Sample

    240920-s4cavatfnb

  • MD5

    ede8103338b9a5d04cc6bf85eff437ba

  • SHA1

    5307dc3f846d03a3133bca394a2cf5304c27d57f

  • SHA256

    658595871bab52fa2b3eb6bdab5080ca18ad8562d30f579404b5d8c7db12e3f9

  • SHA512

    691efb23698f160f80d150de4e609bedafb817c339e20fc15ec847f147dd04c08fecc2638e4de08c45aff7fcc0ed2de783361dd4b0b7b55072f0bcbb11e5b763

  • SSDEEP

    6144:4qlFUOAgjCbFak5GRuZzDkKn3RbxgT7VMa9YocgEBHBQZUNMhwlMbbWg3jtAD6OS:46UOPevlB9sZsuEBHBSWQkcnv

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ede8103338b9a5d04cc6bf85eff437ba_JaffaCakes118

    • Size

      288KB

    • MD5

      ede8103338b9a5d04cc6bf85eff437ba

    • SHA1

      5307dc3f846d03a3133bca394a2cf5304c27d57f

    • SHA256

      658595871bab52fa2b3eb6bdab5080ca18ad8562d30f579404b5d8c7db12e3f9

    • SHA512

      691efb23698f160f80d150de4e609bedafb817c339e20fc15ec847f147dd04c08fecc2638e4de08c45aff7fcc0ed2de783361dd4b0b7b55072f0bcbb11e5b763

    • SSDEEP

      6144:4qlFUOAgjCbFak5GRuZzDkKn3RbxgT7VMa9YocgEBHBQZUNMhwlMbbWg3jtAD6OS:46UOPevlB9sZsuEBHBSWQkcnv

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks