Overview

overview

10

Static

static

3

3725441fcb...18.exe

windows7-x64

10

3725441fcb...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3725441fcb2b1be4f993aed032de8c1d_JaffaCakes118

  • Size

    152KB

  • Sample

    241011-2hr9lssdlm

  • MD5

    3725441fcb2b1be4f993aed032de8c1d

  • SHA1

    a986c615442e3f5f84d6d13ef6ee91fab94f0f95

  • SHA256

    01a2293f25fd6275c6f548e0fb369c55b832fe1b9c51b911881e5821bd939982

  • SHA512

    5094ef45d46c4aeefefcf196175bf0520d87af48533cfa4c8b8f6748df497e2fe0d68a3e66fd9ef8479c522373871d37458c4e2279d9066dc375380dd2a84c6c

  • SSDEEP

    1536:OVDam3zfDju3BlnyaPSHJic7AqVJVhEGTLDARcfSxam9bHsAcNFvbFw9FCio3lmC:caeTDju3BQj026GTLURiSEh3ki

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      3725441fcb2b1be4f993aed032de8c1d_JaffaCakes118

    • Size

      152KB

    • MD5

      3725441fcb2b1be4f993aed032de8c1d

    • SHA1

      a986c615442e3f5f84d6d13ef6ee91fab94f0f95

    • SHA256

      01a2293f25fd6275c6f548e0fb369c55b832fe1b9c51b911881e5821bd939982

    • SHA512

      5094ef45d46c4aeefefcf196175bf0520d87af48533cfa4c8b8f6748df497e2fe0d68a3e66fd9ef8479c522373871d37458c4e2279d9066dc375380dd2a84c6c

    • SSDEEP

      1536:OVDam3zfDju3BlnyaPSHJic7AqVJVhEGTLDARcfSxam9bHsAcNFvbFw9FCio3lmC:caeTDju3BQj026GTLURiSEh3ki

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks