Overview

overview

10

Static

static

3

29b82e56ee...18.exe

windows7-x64

10

29b82e56ee...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29b82e56ee4a6cbfa65df56d5c1b4590_JaffaCakes118

  • Size

    60KB

  • Sample

    241009-dmf55sycqj

  • MD5

    29b82e56ee4a6cbfa65df56d5c1b4590

  • SHA1

    db38a88355c0d60c0b1f1757e57f88b4af19dea0

  • SHA256

    060b529bf4c2aa80699d7b55faec1f8fec567b03384e2f5fbadc4b10e6a526a4

  • SHA512

    b15fdbfdf0bcbf212fe72502c4f630be6fe54cf1070a4f82c8bd057fe7b008d9ff3984c23692f16e7dbcb3e09f5401a5427f245d60ec6d90104f71b1b97932ce

  • SSDEEP

    1536:xmQtZypx6nAndF+bNMhTtF1Lw1o++qMD:xmQPyp4mVDqMD

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      29b82e56ee4a6cbfa65df56d5c1b4590_JaffaCakes118

    • Size

      60KB

    • MD5

      29b82e56ee4a6cbfa65df56d5c1b4590

    • SHA1

      db38a88355c0d60c0b1f1757e57f88b4af19dea0

    • SHA256

      060b529bf4c2aa80699d7b55faec1f8fec567b03384e2f5fbadc4b10e6a526a4

    • SHA512

      b15fdbfdf0bcbf212fe72502c4f630be6fe54cf1070a4f82c8bd057fe7b008d9ff3984c23692f16e7dbcb3e09f5401a5427f245d60ec6d90104f71b1b97932ce

    • SSDEEP

      1536:xmQtZypx6nAndF+bNMhTtF1Lw1o++qMD:xmQPyp4mVDqMD

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks