Overview

overview

10

Static

static

10

009c9dca44...18.exe

windows7-x64

10

009c9dca44...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    009c9dca4476201b05080ca09ea29c5a_JaffaCakes118

  • Size

    27.8MB

  • Sample

    240426-m2qskaeh7z

  • MD5

    009c9dca4476201b05080ca09ea29c5a

  • SHA1

    e3bef5c680c0a3919199b8a7487e4b3d642aa8cd

  • SHA256

    e896e2a08ba8d53ae2f3d5b98b853a3daecb63431de52171b8e492fddd0c7c92

  • SHA512

    7e9bfdda7461dd5821ca94c077396163739057c742e60ae4ff07971594fc415af5f627d7dc6cb7329fef79969f3b29228c6113d53bd94b5d436fedfd9d9437d2

  • SSDEEP

    393216:kd1fdNJsNiVBtuDG+DUDzDjexEX+Srgyv0dyF/YT:

Score
10/10
fakeavfakeavpersistencespyware

Malware Config

Targets

    • Target

      009c9dca4476201b05080ca09ea29c5a_JaffaCakes118

    • Size

      27.8MB

    • MD5

      009c9dca4476201b05080ca09ea29c5a

    • SHA1

      e3bef5c680c0a3919199b8a7487e4b3d642aa8cd

    • SHA256

      e896e2a08ba8d53ae2f3d5b98b853a3daecb63431de52171b8e492fddd0c7c92

    • SHA512

      7e9bfdda7461dd5821ca94c077396163739057c742e60ae4ff07971594fc415af5f627d7dc6cb7329fef79969f3b29228c6113d53bd94b5d436fedfd9d9437d2

    • SSDEEP

      393216:kd1fdNJsNiVBtuDG+DUDzDjexEX+Srgyv0dyF/YT:

    Score
    10/10
    fakeavfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • FakeAV payload

      fakeavspyware

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks