Overview

overview

10

Static

static

3

3e3ef92859...18.exe

windows7-x64

10

3e3ef92859...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e3ef92859cd9d6ed283f7279ab3b6d7_JaffaCakes118

  • Size

    152KB

  • Sample

    241013-gz1bbsxbkk

  • MD5

    3e3ef92859cd9d6ed283f7279ab3b6d7

  • SHA1

    fad4d564944d70c65578c20362a92611bd2ee8f5

  • SHA256

    d264a194f5027f2922044c3118e6a36665dd8d0076362e4a312958f5f73e0077

  • SHA512

    52baab9859ff6141db219e835b9d8ab1bc6ef08ff9bbf116f103f890ced5667190455763385a3a91482c1d117ac4562f7919bc19632d40ff9faf177e7da453a4

  • SSDEEP

    1536:xFimF+VoV6qZO5WV9PZ1K+smtK4/ZWnKT2:xFimF+VoV6qZO5W7afKT2

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      3e3ef92859cd9d6ed283f7279ab3b6d7_JaffaCakes118

    • Size

      152KB

    • MD5

      3e3ef92859cd9d6ed283f7279ab3b6d7

    • SHA1

      fad4d564944d70c65578c20362a92611bd2ee8f5

    • SHA256

      d264a194f5027f2922044c3118e6a36665dd8d0076362e4a312958f5f73e0077

    • SHA512

      52baab9859ff6141db219e835b9d8ab1bc6ef08ff9bbf116f103f890ced5667190455763385a3a91482c1d117ac4562f7919bc19632d40ff9faf177e7da453a4

    • SSDEEP

      1536:xFimF+VoV6qZO5WV9PZ1K+smtK4/ZWnKT2:xFimF+VoV6qZO5W7afKT2

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks