Overview

overview

10

Static

static

3

03d5c0f5a3...18.exe

windows7-x64

10

03d5c0f5a3...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03d5c0f5a395118947911dede6eae937_JaffaCakes118

  • Size

    192KB

  • Sample

    241001-bcr4jsshnk

  • MD5

    03d5c0f5a395118947911dede6eae937

  • SHA1

    1ebb06efc7ab311399d0c950fc8d2649abbdd38c

  • SHA256

    58ca5eed304316c7e9491c7052c0293987abd9910796e7788f4df4514dc7cc22

  • SHA512

    69da15391fe86bb7f56832fba2a58752c2ca5e2577cbda040d5a44489ce9de0e2a785b4338252781a687ee95a53e8acb70270f4e1302a938a9e02edee1dcc707

  • SSDEEP

    3072:wu8+n803OBrpM3lt0bqO4deKIpS2Q9tC3UwtxaTSGzGXDzp8D8OJbhaDge3ogg:jOBr63cbqO40K394aTSGzGZ8ogcYH

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      03d5c0f5a395118947911dede6eae937_JaffaCakes118

    • Size

      192KB

    • MD5

      03d5c0f5a395118947911dede6eae937

    • SHA1

      1ebb06efc7ab311399d0c950fc8d2649abbdd38c

    • SHA256

      58ca5eed304316c7e9491c7052c0293987abd9910796e7788f4df4514dc7cc22

    • SHA512

      69da15391fe86bb7f56832fba2a58752c2ca5e2577cbda040d5a44489ce9de0e2a785b4338252781a687ee95a53e8acb70270f4e1302a938a9e02edee1dcc707

    • SSDEEP

      3072:wu8+n803OBrpM3lt0bqO4deKIpS2Q9tC3UwtxaTSGzGXDzp8D8OJbhaDge3ogg:jOBr63cbqO40K394aTSGzGZ8ogcYH

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks