Overview

overview

10

Static

static

3

ee20eafb8e...18.exe

windows7-x64

10

ee20eafb8e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee20eafb8e2dea3b793c513df2c0dad2_JaffaCakes118

  • Size

    124KB

  • Sample

    240920-wgpjfayhlg

  • MD5

    ee20eafb8e2dea3b793c513df2c0dad2

  • SHA1

    5e5823cd359869735e886507bd144043d240947c

  • SHA256

    969d7b79b292a09ee9d6472ea46408401e178aee673d8b381b2ccd1b4434b9d8

  • SHA512

    06ee3b610ba53ab47133202be6260c29dda2a48f2169af9e6cec879236037c8ed6f1a62d2b5bf23d726022ed62995ba6c33b04411e9c8a681e6ee7e0ae7fc5ca

  • SSDEEP

    1536:uLEFhwRn48NuBxeDtMYHa27J14ltxporZ45izNeG0h/x:IEFhwR48NkeV6gJ1uCt45Jp

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ee20eafb8e2dea3b793c513df2c0dad2_JaffaCakes118

    • Size

      124KB

    • MD5

      ee20eafb8e2dea3b793c513df2c0dad2

    • SHA1

      5e5823cd359869735e886507bd144043d240947c

    • SHA256

      969d7b79b292a09ee9d6472ea46408401e178aee673d8b381b2ccd1b4434b9d8

    • SHA512

      06ee3b610ba53ab47133202be6260c29dda2a48f2169af9e6cec879236037c8ed6f1a62d2b5bf23d726022ed62995ba6c33b04411e9c8a681e6ee7e0ae7fc5ca

    • SSDEEP

      1536:uLEFhwRn48NuBxeDtMYHa27J14ltxporZ45izNeG0h/x:IEFhwR48NkeV6gJ1uCt45Jp

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks