Overview

overview

10

Static

static

3

faed28feb1...18.exe

windows7-x64

10

faed28feb1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    faed28feb1b0c1cf30c75169cce1acb7_JaffaCakes118

  • Size

    222KB

  • Sample

    240419-xatp9acc85

  • MD5

    faed28feb1b0c1cf30c75169cce1acb7

  • SHA1

    d0983982f76f5aa8a1721cb07994d2c30723cf1e

  • SHA256

    8ca4af8069773fedd793507a9322c4ad5012f06b2819c2604cd38c497e6ce046

  • SHA512

    81fc85436439427f0325634d8a8d2d55ea21a7e9dcf0dafbc879387c166fec1c78ee8c6282bb0e9aac17be7b3ac46639c5af86d1f3af3d1b309ca6184472e75e

  • SSDEEP

    6144:HFRVyPpu40GfApOaHcK9dWN/A9kN8cu40GfApOaHcK:HvAMllHPdOMllH

Score
10/10
persistence

Malware Config

Targets

    • Target

      faed28feb1b0c1cf30c75169cce1acb7_JaffaCakes118

    • Size

      222KB

    • MD5

      faed28feb1b0c1cf30c75169cce1acb7

    • SHA1

      d0983982f76f5aa8a1721cb07994d2c30723cf1e

    • SHA256

      8ca4af8069773fedd793507a9322c4ad5012f06b2819c2604cd38c497e6ce046

    • SHA512

      81fc85436439427f0325634d8a8d2d55ea21a7e9dcf0dafbc879387c166fec1c78ee8c6282bb0e9aac17be7b3ac46639c5af86d1f3af3d1b309ca6184472e75e

    • SSDEEP

      6144:HFRVyPpu40GfApOaHcK9dWN/A9kN8cu40GfApOaHcK:HvAMllHPdOMllH

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks