Overview

overview

10

Static

static

3

f38ffe02e2...18.exe

windows7-x64

10

f38ffe02e2...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    f38ffe02e2a131b2a3f64f50878be162_JaffaCakes118

  • Size

    22KB

  • Sample

    240416-qe63tace6z

  • MD5

    f38ffe02e2a131b2a3f64f50878be162

  • SHA1

    babbdedb55441c3722205ca59ea68ac891caeadc

  • SHA256

    fbae87ff612ebacffa67c6b86c006c661eb2f2beb2e93966f472d529814abca8

  • SHA512

    a8858b596ee363a412433fe0b1085ab264a937299ef2fb51cf5527dde181e0d5a90ffa1e568b43106b6cfb4ead815e664e166219cc9633d5e1fa38c5ca28d7ba

  • SSDEEP

    384:WQADcG+m+OfzQn3noNPe0Y6qB8VuB7WoDBBDyMW4W8x3HFQUx+dXqfQBIeT/nVhj:Wzkm7yoBen6z8ByaBBDyR4VpZkXqfsKI

Score
10/10
collectiondiscoverypersistence

Malware Config

Targets

    • Target

      f38ffe02e2a131b2a3f64f50878be162_JaffaCakes118

    • Size

      22KB

    • MD5

      f38ffe02e2a131b2a3f64f50878be162

    • SHA1

      babbdedb55441c3722205ca59ea68ac891caeadc

    • SHA256

      fbae87ff612ebacffa67c6b86c006c661eb2f2beb2e93966f472d529814abca8

    • SHA512

      a8858b596ee363a412433fe0b1085ab264a937299ef2fb51cf5527dde181e0d5a90ffa1e568b43106b6cfb4ead815e664e166219cc9633d5e1fa38c5ca28d7ba

    • SSDEEP

      384:WQADcG+m+OfzQn3noNPe0Y6qB8VuB7WoDBBDyMW4W8x3HFQUx+dXqfQBIeT/nVhj:Wzkm7yoBen6z8ByaBBDyR4VpZkXqfsKI

    Score
    10/10
    collectiondiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Accesses Microsoft Outlook profiles

      collection

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks