Overview

overview

8

Static

static

3

38f96b3a5c...18.exe

windows7-x64

8

38f96b3a5c...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38f96b3a5c831db6182f2240b36ac4bb_JaffaCakes118

  • Size

    168KB

  • Sample

    241012-h5t7yazdka

  • MD5

    38f96b3a5c831db6182f2240b36ac4bb

  • SHA1

    ade4d7b54bcb750a4752666ab5af82326a3bdbbe

  • SHA256

    43824adb8af9ae10f26f18f45017273fea209f4d753e61ef504c8a4640aaeaf8

  • SHA512

    ccc2cefd7d98c3070b1b8b08ba925acf800c442bb20da700fa2e707c840a1169895c17b15fb4226b754633e8dba16c751847069fb7525a91f0d112188cadb746

  • SSDEEP

    1536:d1MhFk3eh1g0gAT4FVzneW/xM341+7cznulEjfWj9KvFiomgHOjikgaWwfhaVNuD:XcFMeOAT4XqW/YcuWwfMV0

Score
8/10
defense_evasiondiscoveryevasionpersistence

Malware Config

Targets

    • Target

      38f96b3a5c831db6182f2240b36ac4bb_JaffaCakes118

    • Size

      168KB

    • MD5

      38f96b3a5c831db6182f2240b36ac4bb

    • SHA1

      ade4d7b54bcb750a4752666ab5af82326a3bdbbe

    • SHA256

      43824adb8af9ae10f26f18f45017273fea209f4d753e61ef504c8a4640aaeaf8

    • SHA512

      ccc2cefd7d98c3070b1b8b08ba925acf800c442bb20da700fa2e707c840a1169895c17b15fb4226b754633e8dba16c751847069fb7525a91f0d112188cadb746

    • SSDEEP

      1536:d1MhFk3eh1g0gAT4FVzneW/xM341+7cznulEjfWj9KvFiomgHOjikgaWwfhaVNuD:XcFMeOAT4XqW/YcuWwfMV0

    Score
    8/10
    defense_evasiondiscoveryevasionpersistence

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks