Overview

overview

10

Static

static

3

027f4d01a1...18.exe

windows7-x64

10

027f4d01a1...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    027f4d01a12387014199d6cb3ad9e9c2_JaffaCakes118

  • Size

    136KB

  • Sample

    240930-v442zaxcpk

  • MD5

    027f4d01a12387014199d6cb3ad9e9c2

  • SHA1

    2dfe37ef42ab3f363dd9eb9105752ba9535616ef

  • SHA256

    f1664880ccd78bbf8a7be48e3f9b22c60dbf0450ad8e9e697b22eed19d49a2c1

  • SHA512

    5ea216823bdcc55929400f555127024891b6fa44332b88b3d0d9ff6df33eac1675eecc1190d7dfdd86d1145bc41641da40ee6f8a805cba4b45e2871eeef7dfdc

  • SSDEEP

    1536:gyahqRoH+BhRKRmH2GijPEUbaxnvdWkNqSP3PKh9pGw93mW9bcGwh+8hcXZDuS8a:9H6EUbaxv13wpUh2XZDutcHdVmn8+uo8

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      027f4d01a12387014199d6cb3ad9e9c2_JaffaCakes118

    • Size

      136KB

    • MD5

      027f4d01a12387014199d6cb3ad9e9c2

    • SHA1

      2dfe37ef42ab3f363dd9eb9105752ba9535616ef

    • SHA256

      f1664880ccd78bbf8a7be48e3f9b22c60dbf0450ad8e9e697b22eed19d49a2c1

    • SHA512

      5ea216823bdcc55929400f555127024891b6fa44332b88b3d0d9ff6df33eac1675eecc1190d7dfdd86d1145bc41641da40ee6f8a805cba4b45e2871eeef7dfdc

    • SSDEEP

      1536:gyahqRoH+BhRKRmH2GijPEUbaxnvdWkNqSP3PKh9pGw93mW9bcGwh+8hcXZDuS8a:9H6EUbaxv13wpUh2XZDutcHdVmn8+uo8

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks