Overview

overview

10

Static

static

3

fbcd6a5b34...18.exe

windows7-x64

10

fbcd6a5b34...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbcd6a5b34b17c60fc409bf890bcef94_JaffaCakes118

  • Size

    204KB

  • Sample

    240928-jdr4yaweng

  • MD5

    fbcd6a5b34b17c60fc409bf890bcef94

  • SHA1

    ae90d52fbd0b60de707e5e0b866bd474521d8bba

  • SHA256

    5fb60d566908f827910484715083d19a9154f5996a5827ef689017d3256b0e44

  • SHA512

    b5e1ac25f74f1bdc93e90c234217424fa4774a064660181a373fccd0bb89ff51d247c9d0044bdc1c82bee19fe250b5a11859766aa5e581c943279cda7032cbd1

  • SSDEEP

    3072:dmrW8Si0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWV/r:k6E4QxL7B9W0c1RCzR/fSmluz

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      fbcd6a5b34b17c60fc409bf890bcef94_JaffaCakes118

    • Size

      204KB

    • MD5

      fbcd6a5b34b17c60fc409bf890bcef94

    • SHA1

      ae90d52fbd0b60de707e5e0b866bd474521d8bba

    • SHA256

      5fb60d566908f827910484715083d19a9154f5996a5827ef689017d3256b0e44

    • SHA512

      b5e1ac25f74f1bdc93e90c234217424fa4774a064660181a373fccd0bb89ff51d247c9d0044bdc1c82bee19fe250b5a11859766aa5e581c943279cda7032cbd1

    • SSDEEP

      3072:dmrW8Si0tQ9nLHbB9W0c1TqECzR/mkSYGrl9ymgYUWV/r:k6E4QxL7B9W0c1RCzR/fSmluz

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks