Overview

overview

10

Static

static

3

edd70f48bd...18.exe

windows7-x64

10

edd70f48bd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    edd70f48bda9f3ac92492bc1b4a53cbf_JaffaCakes118

  • Size

    240KB

  • Sample

    240920-sccsasscnb

  • MD5

    edd70f48bda9f3ac92492bc1b4a53cbf

  • SHA1

    d4aa5f520276ed07a0f8bb7df2a570525be0c452

  • SHA256

    bdb539a8feb6cb90b29195ae3e452c57a0ebeddbf6f0232cce6c453617c221d5

  • SHA512

    1acf6c0aeb34ec65b948045e67bbeef9e36f934269871a36eb3f704109942d2252cec62dcf5152d0be04bc47b3dc2ae84593af977624dd97f62e8110f9dd080c

  • SSDEEP

    6144:FUMY3dwqsNwemAB0EqxF6snji81RUinKchhyCSf:LCdQQJsNf

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      edd70f48bda9f3ac92492bc1b4a53cbf_JaffaCakes118

    • Size

      240KB

    • MD5

      edd70f48bda9f3ac92492bc1b4a53cbf

    • SHA1

      d4aa5f520276ed07a0f8bb7df2a570525be0c452

    • SHA256

      bdb539a8feb6cb90b29195ae3e452c57a0ebeddbf6f0232cce6c453617c221d5

    • SHA512

      1acf6c0aeb34ec65b948045e67bbeef9e36f934269871a36eb3f704109942d2252cec62dcf5152d0be04bc47b3dc2ae84593af977624dd97f62e8110f9dd080c

    • SSDEEP

      6144:FUMY3dwqsNwemAB0EqxF6snji81RUinKchhyCSf:LCdQQJsNf

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks