Overview

overview

10

Static

static

3

037054fc31...18.exe

windows7-x64

10

037054fc31...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    037054fc31f04165eaa390a12f0e3114_JaffaCakes118

  • Size

    384KB

  • Sample

    240930-139tqa1glc

  • MD5

    037054fc31f04165eaa390a12f0e3114

  • SHA1

    54da2ad4fc59c9892910a3dd5e6afac7870e3089

  • SHA256

    74b5167b174945f3bbeb0837013253ffd1ebdc5694ada3f4b04ad54d6ba97db7

  • SHA512

    3a7f7b810cea3c4c3332061c9441ecf3c0f0f4b547f1e250ec9c4f6f63ce222f01733236db8a32601b79d2caf80b1400c6f372454f902d39755d0253a6f5b3aa

  • SSDEEP

    6144:0stj9IM7SG6u34a2TURdgsDZ23w8QEoKHjWZLKBPvHIWM5O:izaAuZ2A81vWpaPvsO

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      037054fc31f04165eaa390a12f0e3114_JaffaCakes118

    • Size

      384KB

    • MD5

      037054fc31f04165eaa390a12f0e3114

    • SHA1

      54da2ad4fc59c9892910a3dd5e6afac7870e3089

    • SHA256

      74b5167b174945f3bbeb0837013253ffd1ebdc5694ada3f4b04ad54d6ba97db7

    • SHA512

      3a7f7b810cea3c4c3332061c9441ecf3c0f0f4b547f1e250ec9c4f6f63ce222f01733236db8a32601b79d2caf80b1400c6f372454f902d39755d0253a6f5b3aa

    • SSDEEP

      6144:0stj9IM7SG6u34a2TURdgsDZ23w8QEoKHjWZLKBPvHIWM5O:izaAuZ2A81vWpaPvsO

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks