Overview

overview

10

Static

static

3

05160f0b00...18.exe

windows7-x64

10

05160f0b00...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    05160f0b0039f0bca598e09032c720e0_JaffaCakes118

  • Size

    96KB

  • Sample

    241001-klp5zszgpn

  • MD5

    05160f0b0039f0bca598e09032c720e0

  • SHA1

    69d06086aae11135c355357a9b2d633051aaf843

  • SHA256

    9d3adf9bbd93454402aab73fd2cc5f4b231799123bc5c2f4c5845724a5c19f9a

  • SHA512

    65770f2d2f689b896ae21cad59caaabbfb64dae88761c6a15a2be62c73742b7c392d47584f4e28d7ffbfd9c2143a7e17d617fa23624b96b8d9448dcc1c422922

  • SSDEEP

    1536:bfEg52ebtyVQO8PXychWewjj3RJEEo/k3gzinynEkRldUEPjlijOewNIj/:DE/eUOychazRqEkMCRld8wC/

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      05160f0b0039f0bca598e09032c720e0_JaffaCakes118

    • Size

      96KB

    • MD5

      05160f0b0039f0bca598e09032c720e0

    • SHA1

      69d06086aae11135c355357a9b2d633051aaf843

    • SHA256

      9d3adf9bbd93454402aab73fd2cc5f4b231799123bc5c2f4c5845724a5c19f9a

    • SHA512

      65770f2d2f689b896ae21cad59caaabbfb64dae88761c6a15a2be62c73742b7c392d47584f4e28d7ffbfd9c2143a7e17d617fa23624b96b8d9448dcc1c422922

    • SSDEEP

      1536:bfEg52ebtyVQO8PXychWewjj3RJEEo/k3gzinynEkRldUEPjlijOewNIj/:DE/eUOychazRqEkMCRld8wC/

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks