Overview

overview

10

Static

static

3

06e205e35f...18.exe

windows7-x64

10

06e205e35f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06e205e35f29fca28202c811a601c5f0_JaffaCakes118

  • Size

    100KB

  • Sample

    241001-wzbejatflk

  • MD5

    06e205e35f29fca28202c811a601c5f0

  • SHA1

    553095ece5b562057fe49a623398ba1824ebf189

  • SHA256

    15640c854eea22e6b4dec7a8ccef04d4f84542d37f95e0a116623a067f5e9848

  • SHA512

    cf6a9a4b9b416ac1f33960991d65ce94f9b68bbbba9906593934802babc6b47a81163095d46ba3b37e045b4e24e2c3178e5944374cbb3b47be94129d93c6d40a

  • SSDEEP

    1536:RTt0L82NTdw3K8rLGZcYADZPU1+73BD88b0ny7NIjnZMd:Cw3fWgZPUQJ7Cned

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      06e205e35f29fca28202c811a601c5f0_JaffaCakes118

    • Size

      100KB

    • MD5

      06e205e35f29fca28202c811a601c5f0

    • SHA1

      553095ece5b562057fe49a623398ba1824ebf189

    • SHA256

      15640c854eea22e6b4dec7a8ccef04d4f84542d37f95e0a116623a067f5e9848

    • SHA512

      cf6a9a4b9b416ac1f33960991d65ce94f9b68bbbba9906593934802babc6b47a81163095d46ba3b37e045b4e24e2c3178e5944374cbb3b47be94129d93c6d40a

    • SSDEEP

      1536:RTt0L82NTdw3K8rLGZcYADZPU1+73BD88b0ny7NIjnZMd:Cw3fWgZPUQJ7Cned

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks