Overview

overview

10

Static

static

3

349bbf89fa...18.exe

windows7-x64

10

349bbf89fa...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    349bbf89fa1e1688e81d6465ebf9b056_JaffaCakes118

  • Size

    433KB

  • Sample

    240511-prw8psba77

  • MD5

    349bbf89fa1e1688e81d6465ebf9b056

  • SHA1

    08e591fbe920e7bb256b6cbc9d62fd621e785f2d

  • SHA256

    9c348a50572933c2609e44ea7d07619ab063229c341986e281b13ff2475f3515

  • SHA512

    4943f90deeac2fd3c92531d3b0378f0e4b252feb079946769e27913b32c5451757eb148803a4519967b8f875450ef10efdc03d9150359aada5a25bbf87dc5301

  • SSDEEP

    6144:UZfec9EbXDk6Rk8KME2EZ/UOPSe570Szp3bE2E4:UZWtI6RkJyOB0P4

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      349bbf89fa1e1688e81d6465ebf9b056_JaffaCakes118

    • Size

      433KB

    • MD5

      349bbf89fa1e1688e81d6465ebf9b056

    • SHA1

      08e591fbe920e7bb256b6cbc9d62fd621e785f2d

    • SHA256

      9c348a50572933c2609e44ea7d07619ab063229c341986e281b13ff2475f3515

    • SHA512

      4943f90deeac2fd3c92531d3b0378f0e4b252feb079946769e27913b32c5451757eb148803a4519967b8f875450ef10efdc03d9150359aada5a25bbf87dc5301

    • SSDEEP

      6144:UZfec9EbXDk6Rk8KME2EZ/UOPSe570Szp3bE2E4:UZWtI6RkJyOB0P4

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks