Overview

overview

10

Static

static

3

826d80668f...18.exe

windows7-x64

10

826d80668f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    826d80668fe34e3c6582e45d29c8bbe7_JaffaCakes118

  • Size

    200KB

  • Sample

    241031-j8wevawlfn

  • MD5

    826d80668fe34e3c6582e45d29c8bbe7

  • SHA1

    f9fe0892ac2b2477b9f1398f7aa8f31881197351

  • SHA256

    5996a74066504d624eaff1993bb8189827e2b7d6374d40198f80c4614535ed9d

  • SHA512

    1f551852346f2f77a5278be0030b8a5fd2b86687a759368dbd9565a44941ad483460378824fbc6be480815ea31b48955b2ad90ed1f1ae1c576dd7e16015e3751

  • SSDEEP

    1536:/m6x2c5dYgkG4xkpHUjZn5B2jZmhYNfZSzvMaReGnO0r:e6xtcdn

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      826d80668fe34e3c6582e45d29c8bbe7_JaffaCakes118

    • Size

      200KB

    • MD5

      826d80668fe34e3c6582e45d29c8bbe7

    • SHA1

      f9fe0892ac2b2477b9f1398f7aa8f31881197351

    • SHA256

      5996a74066504d624eaff1993bb8189827e2b7d6374d40198f80c4614535ed9d

    • SHA512

      1f551852346f2f77a5278be0030b8a5fd2b86687a759368dbd9565a44941ad483460378824fbc6be480815ea31b48955b2ad90ed1f1ae1c576dd7e16015e3751

    • SSDEEP

      1536:/m6x2c5dYgkG4xkpHUjZn5B2jZmhYNfZSzvMaReGnO0r:e6xtcdn

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks