Overview

overview

10

Static

static

3

30bdb2c08c...18.exe

windows7-x64

10

30bdb2c08c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    30bdb2c08ca71f750b60be65dfe28510_JaffaCakes118

  • Size

    504KB

  • Sample

    241010-tj1clszaqm

  • MD5

    30bdb2c08ca71f750b60be65dfe28510

  • SHA1

    908fc78b2a020995a035bce8d7f8b531dfdead85

  • SHA256

    80cbf914e18b7bc24c4ac640166752cb702cb49c2ff2805a904df44a6302164e

  • SHA512

    45238ab9de1ac084e04a0180538f68c14c4645412c3802e8d8014d2bef3689e5b0043fc88836706cd0bf39ac4b261361323c70986408b356c39c0f4bcf79e5bb

  • SSDEEP

    6144:7I9WkWoTgcAwdsuxQUdjQ8MgLSxaZPTIfhhKfd/O1mTSK014pv3e4:EYE3AwdXm2O4hIJ29Oz14xe4

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      30bdb2c08ca71f750b60be65dfe28510_JaffaCakes118

    • Size

      504KB

    • MD5

      30bdb2c08ca71f750b60be65dfe28510

    • SHA1

      908fc78b2a020995a035bce8d7f8b531dfdead85

    • SHA256

      80cbf914e18b7bc24c4ac640166752cb702cb49c2ff2805a904df44a6302164e

    • SHA512

      45238ab9de1ac084e04a0180538f68c14c4645412c3802e8d8014d2bef3689e5b0043fc88836706cd0bf39ac4b261361323c70986408b356c39c0f4bcf79e5bb

    • SSDEEP

      6144:7I9WkWoTgcAwdsuxQUdjQ8MgLSxaZPTIfhhKfd/O1mTSK014pv3e4:EYE3AwdXm2O4hIJ29Oz14xe4

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks