Overview

overview

10

Static

static

3

ee4a271e1a...18.exe

windows7-x64

10

ee4a271e1a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee4a271e1a0ae82b4a97f5cc7bb933d3_JaffaCakes118

  • Size

    132KB

  • Sample

    240920-yb9zasthln

  • MD5

    ee4a271e1a0ae82b4a97f5cc7bb933d3

  • SHA1

    330cbaeece1af17987eb75b75378e208c58b7ac5

  • SHA256

    e53d2128b832fc090b1a7174a9d7b1c6a6b8ede2d922a4d05778818baab18ccb

  • SHA512

    5d06b46fe2e85fd12f6dbaa9f18c1b236730ca27ff433fea53a51acc673391ebb8d43e348e02b904517b26c520166ee00ebb099445873f803296f97677db690d

  • SSDEEP

    3072:w3k/JPrdVfWM8RM/8KmwBErXXFefQmD8ampjIiyfv:f/dX8/KmwBEjXFeos8aCUiyn

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ee4a271e1a0ae82b4a97f5cc7bb933d3_JaffaCakes118

    • Size

      132KB

    • MD5

      ee4a271e1a0ae82b4a97f5cc7bb933d3

    • SHA1

      330cbaeece1af17987eb75b75378e208c58b7ac5

    • SHA256

      e53d2128b832fc090b1a7174a9d7b1c6a6b8ede2d922a4d05778818baab18ccb

    • SHA512

      5d06b46fe2e85fd12f6dbaa9f18c1b236730ca27ff433fea53a51acc673391ebb8d43e348e02b904517b26c520166ee00ebb099445873f803296f97677db690d

    • SSDEEP

      3072:w3k/JPrdVfWM8RM/8KmwBErXXFefQmD8ampjIiyfv:f/dX8/KmwBEjXFeos8aCUiyn

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks