Overview

overview

10

Static

static

3

53636ab242...18.exe

windows7-x64

10

53636ab242...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    53636ab2420e6f6f61bb0a37e443da4a_JaffaCakes118

  • Size

    124KB

  • Sample

    241017-yfyrtswbmr

  • MD5

    53636ab2420e6f6f61bb0a37e443da4a

  • SHA1

    b8dfd990df64eab8f745ab62ee05b9300f9ba849

  • SHA256

    e7a84fadd95f5918a754886d5394974e85afc19c04747d0b7ac4ccaf18b37db6

  • SHA512

    dd77dc296de1bd8811841ee642d7857b13284a635de59bd72a94affe2b48376cbea5e0f46bfd43257ea3dde35e8aa1093f6f5855ca5db041c7867f0d027cd80e

  • SSDEEP

    1536:/JEVhwR7WuBxeDtMYHa27J14ltxporZ45igvNeG0h9:REVhwR6keV6gJ1uCt45Vo9

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      53636ab2420e6f6f61bb0a37e443da4a_JaffaCakes118

    • Size

      124KB

    • MD5

      53636ab2420e6f6f61bb0a37e443da4a

    • SHA1

      b8dfd990df64eab8f745ab62ee05b9300f9ba849

    • SHA256

      e7a84fadd95f5918a754886d5394974e85afc19c04747d0b7ac4ccaf18b37db6

    • SHA512

      dd77dc296de1bd8811841ee642d7857b13284a635de59bd72a94affe2b48376cbea5e0f46bfd43257ea3dde35e8aa1093f6f5855ca5db041c7867f0d027cd80e

    • SSDEEP

      1536:/JEVhwR7WuBxeDtMYHa27J14ltxporZ45igvNeG0h9:REVhwR6keV6gJ1uCt45Vo9

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks