Overview

overview

10

Static

static

3

ee11129ff1...18.exe

windows7-x64

10

ee11129ff1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee11129ff1949b73f9700d0aeacaea47_JaffaCakes118

  • Size

    144KB

  • Sample

    240920-vtmpyaxfmg

  • MD5

    ee11129ff1949b73f9700d0aeacaea47

  • SHA1

    5f21a311b24e33ff30e9905fcb2506665195542e

  • SHA256

    8a981e7e75923c545f19365801f89b7c8f9e3508de86342c8de4c3800f655d7b

  • SHA512

    d7712245a785dcb33a91653d639c55bc9e4443052b880beca5543f819f8d20a6f75f352c0207f12fb6bbd3fa4e8de5fde47e26ff23a6e2ef9b410c8d92d1792b

  • SSDEEP

    3072:QHKFoW3XevhINgVs+Y9YXeKjxF1yO13TWDnt7:QqFlHOq2gYuKjxF15s

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ee11129ff1949b73f9700d0aeacaea47_JaffaCakes118

    • Size

      144KB

    • MD5

      ee11129ff1949b73f9700d0aeacaea47

    • SHA1

      5f21a311b24e33ff30e9905fcb2506665195542e

    • SHA256

      8a981e7e75923c545f19365801f89b7c8f9e3508de86342c8de4c3800f655d7b

    • SHA512

      d7712245a785dcb33a91653d639c55bc9e4443052b880beca5543f819f8d20a6f75f352c0207f12fb6bbd3fa4e8de5fde47e26ff23a6e2ef9b410c8d92d1792b

    • SSDEEP

      3072:QHKFoW3XevhINgVs+Y9YXeKjxF1yO13TWDnt7:QqFlHOq2gYuKjxF15s

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks