Overview

overview

10

Static

static

3

547121f091...18.exe

windows7-x64

10

547121f091...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    547121f09155ef0aab83ccb40da0228c_JaffaCakes118

  • Size

    120KB

  • Sample

    241018-anvhdaxgnl

  • MD5

    547121f09155ef0aab83ccb40da0228c

  • SHA1

    76caf7b8cc275b323a65d10e22f3e71994eb665b

  • SHA256

    ff4ec494b553cd4c163fc85f37d2b334efd603b189b512334ce33ba541f83681

  • SHA512

    3f4eafac52101814c14a5b8dfebe58813efa3f8054ef381b33536ff900ef765d9495d8a1ba41f239eecbc7bbdeb7f1dca7cbb3b8551d9783d9a5778d1fb99f86

  • SSDEEP

    768:3UrVnDYoRnc/XOXVLW2qZ1RisVDaWGNMMMNMUF7//mk8KacrZxbjARZ+uc:k1kIcvwNWhZ1X7//mkjZxbURZ+u

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      547121f09155ef0aab83ccb40da0228c_JaffaCakes118

    • Size

      120KB

    • MD5

      547121f09155ef0aab83ccb40da0228c

    • SHA1

      76caf7b8cc275b323a65d10e22f3e71994eb665b

    • SHA256

      ff4ec494b553cd4c163fc85f37d2b334efd603b189b512334ce33ba541f83681

    • SHA512

      3f4eafac52101814c14a5b8dfebe58813efa3f8054ef381b33536ff900ef765d9495d8a1ba41f239eecbc7bbdeb7f1dca7cbb3b8551d9783d9a5778d1fb99f86

    • SSDEEP

      768:3UrVnDYoRnc/XOXVLW2qZ1RisVDaWGNMMMNMUF7//mk8KacrZxbjARZ+uc:k1kIcvwNWhZ1X7//mkjZxbURZ+u

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks