Overview

overview

10

Static

static

3

1474417d1b...18.exe

windows7-x64

10

1474417d1b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1474417d1b8b02946ac3587d9c56e786_JaffaCakes118

  • Size

    180KB

  • Sample

    241004-wzy6layfnr

  • MD5

    1474417d1b8b02946ac3587d9c56e786

  • SHA1

    f66661ec7ded585fb48b6984b7299e3a25f468e2

  • SHA256

    de9be63583340e2c0103ab68a745816cab302d1467339c2293453db60e4af713

  • SHA512

    c93fcf806604fc5d6f81bfb4feeab1789312cb344dd18713b5d834a99050cdd602e18459179598a6fe1af6441ef3ad1fda594f87143df8c36914dde5d6f79982

  • SSDEEP

    1536:Ocxgw99C4YUUTq2Q/hZx7vkrkx/xBEWMFUV:Ffcrkx/xHMF

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      1474417d1b8b02946ac3587d9c56e786_JaffaCakes118

    • Size

      180KB

    • MD5

      1474417d1b8b02946ac3587d9c56e786

    • SHA1

      f66661ec7ded585fb48b6984b7299e3a25f468e2

    • SHA256

      de9be63583340e2c0103ab68a745816cab302d1467339c2293453db60e4af713

    • SHA512

      c93fcf806604fc5d6f81bfb4feeab1789312cb344dd18713b5d834a99050cdd602e18459179598a6fe1af6441ef3ad1fda594f87143df8c36914dde5d6f79982

    • SSDEEP

      1536:Ocxgw99C4YUUTq2Q/hZx7vkrkx/xBEWMFUV:Ffcrkx/xHMF

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks