Overview

overview

10

Static

static

3

280f7db77a...18.exe

windows7-x64

10

280f7db77a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    280f7db77ac3c8927c427fb12dab06c4_JaffaCakes118

  • Size

    200KB

  • Sample

    241009-baf89szeje

  • MD5

    280f7db77ac3c8927c427fb12dab06c4

  • SHA1

    07f57daf4968e0bd17701700fba56487385a7009

  • SHA256

    60bc0bb531153af1e73e3a138cba7372b2e73b24f031cb42e65ed9ff8619ead4

  • SHA512

    df58f9593fdf38638e8f9afdd8ade376372e0cba9f627e0938ab766f43f88fa417a60aeebe65cb12d74ce6a855a3753ae55b400ce2cab226a654296e73258d22

  • SSDEEP

    3072:SC6To/0Yxq0tQ9nLHbB9WPliBs2HWWEakGJm9uoe:SCjg4QxL7B9WPli+yWWEazNx

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      280f7db77ac3c8927c427fb12dab06c4_JaffaCakes118

    • Size

      200KB

    • MD5

      280f7db77ac3c8927c427fb12dab06c4

    • SHA1

      07f57daf4968e0bd17701700fba56487385a7009

    • SHA256

      60bc0bb531153af1e73e3a138cba7372b2e73b24f031cb42e65ed9ff8619ead4

    • SHA512

      df58f9593fdf38638e8f9afdd8ade376372e0cba9f627e0938ab766f43f88fa417a60aeebe65cb12d74ce6a855a3753ae55b400ce2cab226a654296e73258d22

    • SSDEEP

      3072:SC6To/0Yxq0tQ9nLHbB9WPliBs2HWWEakGJm9uoe:SCjg4QxL7B9WPli+yWWEazNx

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks