Overview

overview

10

Static

static

3

11e4392b79...18.exe

windows7-x64

10

11e4392b79...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11e4392b79f6f9d06283ae4cdb7c6901_JaffaCakes118

  • Size

    124KB

  • Sample

    241004-feptesyhnb

  • MD5

    11e4392b79f6f9d06283ae4cdb7c6901

  • SHA1

    876e1c001bbcf0ce348d49ccf7b816483da4191e

  • SHA256

    efd38796a065a58d2bc0d9d5877da3d986efa5331b5503f1bac0268f50d4f569

  • SHA512

    56fdfb75b8f288f0e018384d0ab8ed85db63454a17bd915748459fd6ae4b6c7003d28d217040bc6c55edfcab041e20de4f1505584f873fe4aa08066e644a1079

  • SSDEEP

    1536:RkEJhwRMuBxeDtMYHa27J14ltxporZ45iyNeG0h/x:+EJhwRMkeV6gJ1uCt45op

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      11e4392b79f6f9d06283ae4cdb7c6901_JaffaCakes118

    • Size

      124KB

    • MD5

      11e4392b79f6f9d06283ae4cdb7c6901

    • SHA1

      876e1c001bbcf0ce348d49ccf7b816483da4191e

    • SHA256

      efd38796a065a58d2bc0d9d5877da3d986efa5331b5503f1bac0268f50d4f569

    • SHA512

      56fdfb75b8f288f0e018384d0ab8ed85db63454a17bd915748459fd6ae4b6c7003d28d217040bc6c55edfcab041e20de4f1505584f873fe4aa08066e644a1079

    • SSDEEP

      1536:RkEJhwRMuBxeDtMYHa27J14ltxporZ45iyNeG0h/x:+EJhwRMkeV6gJ1uCt45op

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks