Overview

overview

10

Static

static

3

155c20e9f6...18.exe

windows7-x64

10

155c20e9f6...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    155c20e9f6db98a43ef71f3fbbb92f90_JaffaCakes118

  • Size

    781KB

  • Sample

    240505-bsxc7sac2x

  • MD5

    155c20e9f6db98a43ef71f3fbbb92f90

  • SHA1

    1b55578c11a0f5e3da2045812220a2170e3596c6

  • SHA256

    1dbef21f59dd254b940304088953245bb00255549d370c35a61970ff9152bbc4

  • SHA512

    b11d19875b2a3ba075b3eb571246d05eba39df9e399190817656f487b136db3c000480439b293da02d46ac650156d270df381e988b17817fb50766ce37b41879

  • SSDEEP

    6144:UZfec9EbXDk6RkdKWnmy+g4VrG1VVE+I2GFrQZb++tdsHP4+QfI6U9/UOPSe570H:UZWtI6RkzKuxerQZb+md4w1UWOB0H

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      155c20e9f6db98a43ef71f3fbbb92f90_JaffaCakes118

    • Size

      781KB

    • MD5

      155c20e9f6db98a43ef71f3fbbb92f90

    • SHA1

      1b55578c11a0f5e3da2045812220a2170e3596c6

    • SHA256

      1dbef21f59dd254b940304088953245bb00255549d370c35a61970ff9152bbc4

    • SHA512

      b11d19875b2a3ba075b3eb571246d05eba39df9e399190817656f487b136db3c000480439b293da02d46ac650156d270df381e988b17817fb50766ce37b41879

    • SSDEEP

      6144:UZfec9EbXDk6RkdKWnmy+g4VrG1VVE+I2GFrQZb++tdsHP4+QfI6U9/UOPSe570H:UZWtI6RkzKuxerQZb+md4w1UWOB0H

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks