Overview

overview

10

Static

static

3

09053e2f87...18.exe

windows7-x64

10

09053e2f87...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09053e2f87a36bc9688b9989d2693f50_JaffaCakes118

  • Size

    541KB

  • Sample

    240430-e4js2acc69

  • MD5

    09053e2f87a36bc9688b9989d2693f50

  • SHA1

    0114b58bdfa6cdfcfbce7df91325d2a665ec3831

  • SHA256

    a2a61fd69318eb5e728694f5833cbe673e460adc0ac3baae704c703b84431d6a

  • SHA512

    00c09aa2f3f2cec4a7fcda44e53bbc282ed5c553777d2684fa42c3f6eeadc6268af150e4aa25a30f5f0285c32d8c5617cd99c3d4327a7538f1ef0936497e6a48

  • SSDEEP

    6144:UZfec9EbXDk6RkC4KWnmy+g4VrG1VVE+Iznmy+g4IE2EBE2EVe/ucW:UZWtI6RkPKu0aMOrW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      09053e2f87a36bc9688b9989d2693f50_JaffaCakes118

    • Size

      541KB

    • MD5

      09053e2f87a36bc9688b9989d2693f50

    • SHA1

      0114b58bdfa6cdfcfbce7df91325d2a665ec3831

    • SHA256

      a2a61fd69318eb5e728694f5833cbe673e460adc0ac3baae704c703b84431d6a

    • SHA512

      00c09aa2f3f2cec4a7fcda44e53bbc282ed5c553777d2684fa42c3f6eeadc6268af150e4aa25a30f5f0285c32d8c5617cd99c3d4327a7538f1ef0936497e6a48

    • SSDEEP

      6144:UZfec9EbXDk6RkC4KWnmy+g4VrG1VVE+Iznmy+g4IE2EBE2EVe/ucW:UZWtI6RkPKu0aMOrW

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks