Overview

overview

10

Static

static

3

de280e1f99...18.exe

windows7-x64

10

de280e1f99...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    de280e1f9995b792479868d26a33d0a1_JaffaCakes118.exe

  • Size

    64KB

  • Sample

    240504-yvnkeacg32

  • MD5

    de280e1f9995b792479868d26a33d0a1

  • SHA1

    cb93ca91aa90c136e690db2f6e88401be1fd99f2

  • SHA256

    07b909bbb75355828bfde549796f82d045e455ab14aa87f9bbba6673b4aef475

  • SHA512

    b2d276a43e4ebdda45aeea01ea4a4c896dc6857822700d32426d305610b7df2d366d5ccc26cba450c00d6828b8181d7afa94f4a2de8776fa76a7fc0f954d0ceb

  • SSDEEP

    1536:gQrxTngjBkjrqOXRMi7yPBqG5TII2LMsBMu/H1:gQrxTngtkjrqOXqi7yZx5TIZMaN

Score
10/10
persistence

Malware Config

Targets

    • Target

      de280e1f9995b792479868d26a33d0a1_JaffaCakes118.exe

    • Size

      64KB

    • MD5

      de280e1f9995b792479868d26a33d0a1

    • SHA1

      cb93ca91aa90c136e690db2f6e88401be1fd99f2

    • SHA256

      07b909bbb75355828bfde549796f82d045e455ab14aa87f9bbba6673b4aef475

    • SHA512

      b2d276a43e4ebdda45aeea01ea4a4c896dc6857822700d32426d305610b7df2d366d5ccc26cba450c00d6828b8181d7afa94f4a2de8776fa76a7fc0f954d0ceb

    • SSDEEP

      1536:gQrxTngjBkjrqOXRMi7yPBqG5TII2LMsBMu/H1:gQrxTngtkjrqOXqi7yZx5TIZMaN

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks