Overview

overview

10

Static

static

3

d393b9c3df...18.exe

windows7-x64

10

d393b9c3df...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d393b9c3df5b565da9920621136562c4_JaffaCakes118.exe

  • Size

    400KB

  • Sample

    240504-ysp1fscf39

  • MD5

    d393b9c3df5b565da9920621136562c4

  • SHA1

    fb77644c2adc012cb2fc4d87867c86c7af9a7205

  • SHA256

    85e098ae82a60b6e5bb09e1cf1ebad16df247eaadc131dddc8851dc50276db9d

  • SHA512

    3ca002445a7fe9f8119070cd6b54365349f095f7474b54d6ca598e028aaf6642e696c6367a9554c8cb3f4aaabdae9ba1a6568cd614d98f29927ae3752e86b9ea

  • SSDEEP

    6144:IhMNcLLps4dLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:IhpLfRrgryg426RQagrkj

Score
10/10
persistence

Malware Config

Targets

    • Target

      d393b9c3df5b565da9920621136562c4_JaffaCakes118.exe

    • Size

      400KB

    • MD5

      d393b9c3df5b565da9920621136562c4

    • SHA1

      fb77644c2adc012cb2fc4d87867c86c7af9a7205

    • SHA256

      85e098ae82a60b6e5bb09e1cf1ebad16df247eaadc131dddc8851dc50276db9d

    • SHA512

      3ca002445a7fe9f8119070cd6b54365349f095f7474b54d6ca598e028aaf6642e696c6367a9554c8cb3f4aaabdae9ba1a6568cd614d98f29927ae3752e86b9ea

    • SSDEEP

      6144:IhMNcLLps4dLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:IhpLfRrgryg426RQagrkj

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks