Overview

overview

10

Static

static

3

2e11c3577d...18.exe

windows7-x64

10

2e11c3577d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e11c3577db1aa7c0ad16f2e1fa2b3d0_JaffaCakes118

  • Size

    92KB

  • Sample

    241009-kkxtfatgpb

  • MD5

    2e11c3577db1aa7c0ad16f2e1fa2b3d0

  • SHA1

    a9ffd37f8fe86cea1e9d0763e7b8030c3dc1559a

  • SHA256

    81438320acbe910f1191f36579c8b53160569326a975961e208675c69d50b9af

  • SHA512

    fc0b790bd88e976c9f401867a2c0e49014bdef02262e959d2b13de7c04e11fa0227a50264931f57f724c8570bab3c4b8d4977e1ee30b338c58713aa559b48cf5

  • SSDEEP

    768:IdZvpFZtBTSD9mx0CjIGhY4VVN2b1LllfRddcQVEWSdejXT+153qSgP:IdtpXq9Cr0GhXKdTdTiWS0jG3qDP

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      2e11c3577db1aa7c0ad16f2e1fa2b3d0_JaffaCakes118

    • Size

      92KB

    • MD5

      2e11c3577db1aa7c0ad16f2e1fa2b3d0

    • SHA1

      a9ffd37f8fe86cea1e9d0763e7b8030c3dc1559a

    • SHA256

      81438320acbe910f1191f36579c8b53160569326a975961e208675c69d50b9af

    • SHA512

      fc0b790bd88e976c9f401867a2c0e49014bdef02262e959d2b13de7c04e11fa0227a50264931f57f724c8570bab3c4b8d4977e1ee30b338c58713aa559b48cf5

    • SSDEEP

      768:IdZvpFZtBTSD9mx0CjIGhY4VVN2b1LllfRddcQVEWSdejXT+153qSgP:IdtpXq9Cr0GhXKdTdTiWS0jG3qDP

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks