Overview

overview

10

Static

static

3

2421399ac9...18.exe

windows7-x64

10

2421399ac9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2421399ac9bba455b8bb80219b98576e_JaffaCakes118

  • Size

    616KB

  • Sample

    240508-kzzxcafc72

  • MD5

    2421399ac9bba455b8bb80219b98576e

  • SHA1

    4f36a05e3da03a3656abfc7a380c71e0892ffe12

  • SHA256

    646196b462766448696500378ed7c038628663ac21b6c5f8d578d52cd0278508

  • SHA512

    ffda2586dc2f83f73985048ed3c1b087d8e7309f0d6d18244b1a206e504599d435f95a6023dedde25c3465f9781f66c1d1b73af0d4126b7250df27903d8ddc3d

  • SSDEEP

    6144:UZfec9EbXDk6Rk8KFHrG1VVE+IwrG1VVE+Iznmy+g4yuHOSHrG1VVE+IwrG1VVEE:UZWtI6Rk7Lunu0GOSLunu03OuD6

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      2421399ac9bba455b8bb80219b98576e_JaffaCakes118

    • Size

      616KB

    • MD5

      2421399ac9bba455b8bb80219b98576e

    • SHA1

      4f36a05e3da03a3656abfc7a380c71e0892ffe12

    • SHA256

      646196b462766448696500378ed7c038628663ac21b6c5f8d578d52cd0278508

    • SHA512

      ffda2586dc2f83f73985048ed3c1b087d8e7309f0d6d18244b1a206e504599d435f95a6023dedde25c3465f9781f66c1d1b73af0d4126b7250df27903d8ddc3d

    • SSDEEP

      6144:UZfec9EbXDk6Rk8KFHrG1VVE+IwrG1VVE+Iznmy+g4yuHOSHrG1VVE+IwrG1VVEE:UZWtI6Rk7Lunu0GOSLunu03OuD6

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks