Overview

overview

10

Static

static

3

b4f097f92f...18.exe

windows7-x64

10

b4f097f92f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4f097f92fbd851bd7853579e40811c4_JaffaCakes118

  • Size

    55KB

  • Sample

    241130-fw7esstqf1

  • MD5

    b4f097f92fbd851bd7853579e40811c4

  • SHA1

    b8d489188eb2ac363baf84ad5e76dbbd6ea475e6

  • SHA256

    6c06d2ebb3fed2c2e5b4f8e7da52a10310e6359e21ec9ae7ee5d58fa84c5427d

  • SHA512

    2765a3c13159164a993ac25fc906ddd1c0c07e24b93756a0a8c5efd70dc3d3c317884bc2652b35a86601c0a76815798fd19c28115356819d106e6304b1edc28f

  • SSDEEP

    768:Oe3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJapg4RoSMZeUZB/QosWpH+DrCUpfc:V3cpyORJLuB4P4AJJv4Romu/9tpvUZs

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      b4f097f92fbd851bd7853579e40811c4_JaffaCakes118

    • Size

      55KB

    • MD5

      b4f097f92fbd851bd7853579e40811c4

    • SHA1

      b8d489188eb2ac363baf84ad5e76dbbd6ea475e6

    • SHA256

      6c06d2ebb3fed2c2e5b4f8e7da52a10310e6359e21ec9ae7ee5d58fa84c5427d

    • SHA512

      2765a3c13159164a993ac25fc906ddd1c0c07e24b93756a0a8c5efd70dc3d3c317884bc2652b35a86601c0a76815798fd19c28115356819d106e6304b1edc28f

    • SSDEEP

      768:Oe3PFaDVyOQgljLDKRJyM3BmsHzSB4us/wJJapg4RoSMZeUZB/QosWpH+DrCUpfc:V3cpyORJLuB4P4AJJv4Romu/9tpvUZs

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks