Overview

overview

10

Static

static

3

ca941cb04c...18.exe

windows7-x64

10

ca941cb04c...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ca941cb04c4f6561e4aea90188497902_JaffaCakes118.exe

  • Size

    128KB

  • Sample

    240504-wyds9shb34

  • MD5

    ca941cb04c4f6561e4aea90188497902

  • SHA1

    8df2f529aaabbec0f68296e69ce1c0b8dfe25a01

  • SHA256

    b9e0ea59f4e26a11f7e0afd85498ddde1f9adf92a9ab4166f0d3fa470ad5b838

  • SHA512

    db40fc72b30ec4d0c82f782032b32ec90752ee6b1101f231ea95349d6c2048a6f6dbc0a2e246e8683eb92d5c8d6c9496394381cc72b9dc5764cb4e4a6707ba03

  • SSDEEP

    3072:nOyBAYYBq0/KDPxMeEvPOdgujv6NLPfFFrKP9:nOy6YEq5DJML3OdgawrFZKP

Score
10/10
persistence

Malware Config

Targets

    • Target

      ca941cb04c4f6561e4aea90188497902_JaffaCakes118.exe

    • Size

      128KB

    • MD5

      ca941cb04c4f6561e4aea90188497902

    • SHA1

      8df2f529aaabbec0f68296e69ce1c0b8dfe25a01

    • SHA256

      b9e0ea59f4e26a11f7e0afd85498ddde1f9adf92a9ab4166f0d3fa470ad5b838

    • SHA512

      db40fc72b30ec4d0c82f782032b32ec90752ee6b1101f231ea95349d6c2048a6f6dbc0a2e246e8683eb92d5c8d6c9496394381cc72b9dc5764cb4e4a6707ba03

    • SSDEEP

      3072:nOyBAYYBq0/KDPxMeEvPOdgujv6NLPfFFrKP9:nOy6YEq5DJML3OdgawrFZKP

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks