Overview

overview

10

Static

static

3

12cf44739b...18.exe

windows7-x64

10

12cf44739b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12cf44739b9332db434df7bc10b12b61_JaffaCakes118

  • Size

    156KB

  • Sample

    241004-lm9fpaxaqp

  • MD5

    12cf44739b9332db434df7bc10b12b61

  • SHA1

    01e57ff7e547fcc9d8cdd6742694107a54270337

  • SHA256

    a4fac3da14eae7c5bcbb695b2b2c64f7d6a33802c1e494e503a5161a274007b2

  • SHA512

    db5eceab08b6354c1c758f8cee9709a0ffeeaab7e343085d68893db608fe75bc4f1d898364905b750322b90bd5a3fb8e9a5da58f22a2745227c0d0e50910918a

  • SSDEEP

    3072:8noxLFYOpMS7yJuu4TrVlpT3rZy93E3ipMdIyH+Y8DuALIXTa4oQZiEQH:/xCfJuu4l3rZy93UipMd9+Y8DuZaWG

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      12cf44739b9332db434df7bc10b12b61_JaffaCakes118

    • Size

      156KB

    • MD5

      12cf44739b9332db434df7bc10b12b61

    • SHA1

      01e57ff7e547fcc9d8cdd6742694107a54270337

    • SHA256

      a4fac3da14eae7c5bcbb695b2b2c64f7d6a33802c1e494e503a5161a274007b2

    • SHA512

      db5eceab08b6354c1c758f8cee9709a0ffeeaab7e343085d68893db608fe75bc4f1d898364905b750322b90bd5a3fb8e9a5da58f22a2745227c0d0e50910918a

    • SSDEEP

      3072:8noxLFYOpMS7yJuu4TrVlpT3rZy93E3ipMdIyH+Y8DuALIXTa4oQZiEQH:/xCfJuu4l3rZy93UipMd9+Y8DuZaWG

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks