Overview

overview

10

Static

static

3

e2b64d41e9...18.exe

windows7-x64

10

e2b64d41e9...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e2b64d41e91df0886ebba7d44e1acca3_JaffaCakes118

  • Size

    805KB

  • Sample

    240406-rgyd5aca8t

  • MD5

    e2b64d41e91df0886ebba7d44e1acca3

  • SHA1

    ea3f5b0a5982773d14da61be3718af5278f34f62

  • SHA256

    26605728181df663c8486c436d0a66da25a5b3acd95df6e85aec0ad3db283c2d

  • SHA512

    5ec7204e7ce6192083ebaff320546e010c46a145750f350f7a930bcac0af908113b5664d020e479c5bc1294d693d115b00822b2229c92bfeb8e1c6cf1b145a2b

  • SSDEEP

    6144:UZfec9EbXDk6RkdKWnmy+g4IE2EorG1VVE+I2GFrQZb++tdsHP4+QfI6UVE2EIbo:UZWtI6RkzakuxerQZb+md4w1UAEZ2

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      e2b64d41e91df0886ebba7d44e1acca3_JaffaCakes118

    • Size

      805KB

    • MD5

      e2b64d41e91df0886ebba7d44e1acca3

    • SHA1

      ea3f5b0a5982773d14da61be3718af5278f34f62

    • SHA256

      26605728181df663c8486c436d0a66da25a5b3acd95df6e85aec0ad3db283c2d

    • SHA512

      5ec7204e7ce6192083ebaff320546e010c46a145750f350f7a930bcac0af908113b5664d020e479c5bc1294d693d115b00822b2229c92bfeb8e1c6cf1b145a2b

    • SSDEEP

      6144:UZfec9EbXDk6RkdKWnmy+g4IE2EorG1VVE+I2GFrQZb++tdsHP4+QfI6UVE2EIbo:UZWtI6RkzakuxerQZb+md4w1UAEZ2

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks