Overview

overview

10

Static

static

3

ee64b0dd0d...18.exe

windows7-x64

10

ee64b0dd0d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee64b0dd0df2b274a2161138cfc7dc41_JaffaCakes118

  • Size

    124KB

  • Sample

    240920-zj49fsxcje

  • MD5

    ee64b0dd0df2b274a2161138cfc7dc41

  • SHA1

    febe742054562c9a18907ebb7ca087fd34a6dc78

  • SHA256

    f7ebe4958a37c2312b5fe975c997ba9b6b4a7b97d959f0a67a3a94fe84d28f83

  • SHA512

    8c7dbf82c2bf89dbd86c3ae5656b549a47532dd032995fdc77e339ddd04ce1d034930488c102bfeaeab0d97392068fd19cfb452d0cb172aabc651e86e4532e76

  • SSDEEP

    1536:epEMhwRPLuBxeDtMYHa27J14ltxporZ45izNeG0h/x:iEMhwRPLkeV6gJ1uCt45Jp

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ee64b0dd0df2b274a2161138cfc7dc41_JaffaCakes118

    • Size

      124KB

    • MD5

      ee64b0dd0df2b274a2161138cfc7dc41

    • SHA1

      febe742054562c9a18907ebb7ca087fd34a6dc78

    • SHA256

      f7ebe4958a37c2312b5fe975c997ba9b6b4a7b97d959f0a67a3a94fe84d28f83

    • SHA512

      8c7dbf82c2bf89dbd86c3ae5656b549a47532dd032995fdc77e339ddd04ce1d034930488c102bfeaeab0d97392068fd19cfb452d0cb172aabc651e86e4532e76

    • SSDEEP

      1536:epEMhwRPLuBxeDtMYHa27J14ltxporZ45izNeG0h/x:iEMhwRPLkeV6gJ1uCt45Jp

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks