Overview

overview

10

Static

static

3

ef29116606...18.exe

windows7-x64

10

ef29116606...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef29116606a97565b077c0574740e6cc_JaffaCakes118

  • Size

    72KB

  • Sample

    240921-gb2t9axdrp

  • MD5

    ef29116606a97565b077c0574740e6cc

  • SHA1

    3ad4fa84a0d91a7838ffbb28dc78f929c6aa82b3

  • SHA256

    569ab22b6afce36ce612c89ef99b65eca19333c3014702029d5956a954c2b4e2

  • SHA512

    2ffbf929e5c39bb21612dc5584e84739a054fdf9e598bed7c5e25c5f612febb89efab34cc7015357d9a8aab9dcb3120ceaed5ad68b081a1852cf677eca3ce4f2

  • SSDEEP

    768:b2muiOjd97FEk3lY7qDpGjW7/U/jSXuHQilKPMPC4VqrMZWXArffTeffUW7EBmAw:bW9REGlkqDUWb0jOYC4VqrMZWXAWAdTe

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      ef29116606a97565b077c0574740e6cc_JaffaCakes118

    • Size

      72KB

    • MD5

      ef29116606a97565b077c0574740e6cc

    • SHA1

      3ad4fa84a0d91a7838ffbb28dc78f929c6aa82b3

    • SHA256

      569ab22b6afce36ce612c89ef99b65eca19333c3014702029d5956a954c2b4e2

    • SHA512

      2ffbf929e5c39bb21612dc5584e84739a054fdf9e598bed7c5e25c5f612febb89efab34cc7015357d9a8aab9dcb3120ceaed5ad68b081a1852cf677eca3ce4f2

    • SSDEEP

      768:b2muiOjd97FEk3lY7qDpGjW7/U/jSXuHQilKPMPC4VqrMZWXArffTeffUW7EBmAw:bW9REGlkqDUWb0jOYC4VqrMZWXAWAdTe

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks