Overview

overview

10

Static

static

3

0836c9e5d3...18.exe

windows7-x64

10

0836c9e5d3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0836c9e5d3d06272f8b878f5ccdfca30_JaffaCakes118

  • Size

    288KB

  • Sample

    241002-bm39kazdkj

  • MD5

    0836c9e5d3d06272f8b878f5ccdfca30

  • SHA1

    06b08374ba96e8388d90a63c16700d29eccf1e89

  • SHA256

    68f84fe1a6d651a996792f7167b2802daeb938998ac0fc47f054ecc0f3962182

  • SHA512

    da575d812136b42ddd45b5dd8e6b2e0d8366f995ee98bb19bcfd8d546691083b40f7839dcc9e7b6d9375f1e865f96780eaa2bd92a1b81894e5c8266ea590ca72

  • SSDEEP

    6144:P0ofc0f7XP+g3AGJpWVzu/2oMKnvmb7/D26jiuX1N38RAFrjgWtokZkuL6O96/Ye:Pq27/XvLWpu/2oMKnvmb7/D26j138RAK

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      0836c9e5d3d06272f8b878f5ccdfca30_JaffaCakes118

    • Size

      288KB

    • MD5

      0836c9e5d3d06272f8b878f5ccdfca30

    • SHA1

      06b08374ba96e8388d90a63c16700d29eccf1e89

    • SHA256

      68f84fe1a6d651a996792f7167b2802daeb938998ac0fc47f054ecc0f3962182

    • SHA512

      da575d812136b42ddd45b5dd8e6b2e0d8366f995ee98bb19bcfd8d546691083b40f7839dcc9e7b6d9375f1e865f96780eaa2bd92a1b81894e5c8266ea590ca72

    • SSDEEP

      6144:P0ofc0f7XP+g3AGJpWVzu/2oMKnvmb7/D26jiuX1N38RAFrjgWtokZkuL6O96/Ye:Pq27/XvLWpu/2oMKnvmb7/D26j138RAK

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks