Overview

overview

10

Static

static

3

2d97d56088...18.exe

windows7-x64

10

2d97d56088...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2d97d560881c08ea2a34adcb50c08147_JaffaCakes118

  • Size

    268KB

  • Sample

    241009-jsbqhazhra

  • MD5

    2d97d560881c08ea2a34adcb50c08147

  • SHA1

    af18e55035935fec4836df19e3f6e0d9e11828ca

  • SHA256

    f940000d6a3bd9e4cdd0176bd8cc3f5935818e8c4cccdd24c448a1e5864170b3

  • SHA512

    d56fb0a78ce5c4e6313b0f7c4365c3dcb976ba5c0628c4b74595b3b992cba7a4e319d5f409bf3e36832d3b1da27199ddf4a915fcf0ac966131a6a8f1664ae0d2

  • SSDEEP

    3072:zzArnvRnvtnvtnv5nvxnvxnvanvcnv2nvDnvhnv7nvDnv5nvynvJnvVnvynvSnvx:zzA

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      2d97d560881c08ea2a34adcb50c08147_JaffaCakes118

    • Size

      268KB

    • MD5

      2d97d560881c08ea2a34adcb50c08147

    • SHA1

      af18e55035935fec4836df19e3f6e0d9e11828ca

    • SHA256

      f940000d6a3bd9e4cdd0176bd8cc3f5935818e8c4cccdd24c448a1e5864170b3

    • SHA512

      d56fb0a78ce5c4e6313b0f7c4365c3dcb976ba5c0628c4b74595b3b992cba7a4e319d5f409bf3e36832d3b1da27199ddf4a915fcf0ac966131a6a8f1664ae0d2

    • SSDEEP

      3072:zzArnvRnvtnvtnv5nvxnvxnvanvcnv2nvDnvhnv7nvDnv5nvynvJnvVnvynvSnvx:zzA

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks