Overview

overview

10

Static

static

3

6477847b51...18.exe

windows7-x64

10

6477847b51...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6477847b51b95d6af964de352b02ac43_JaffaCakes118

  • Size

    1.7MB

  • Sample

    240521-x2tjkaff79

  • MD5

    6477847b51b95d6af964de352b02ac43

  • SHA1

    2acd2bdcb93ca83d547fa7dc699612ca76830d29

  • SHA256

    4bb0d0c7f90d702fc471641711b0b500d261a740740f6a2b2bd916028f755d7d

  • SHA512

    2c9fceda5a8e5e306fd5986ebc44cefb22167d1c62f1adb3720ad0e1a494983eb5015b5d0e9b654c42435fe2d51d6551f5c3de867bfba361e8eb30dc5f19f0eb

  • SSDEEP

    12288:UZWtI6RkGOB06UOB0vwOcOB06UOB0vwOcOB06UOB0vwOcOB064ut:UuhaGOkOAmOkOAmOkOAmOx

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      6477847b51b95d6af964de352b02ac43_JaffaCakes118

    • Size

      1.7MB

    • MD5

      6477847b51b95d6af964de352b02ac43

    • SHA1

      2acd2bdcb93ca83d547fa7dc699612ca76830d29

    • SHA256

      4bb0d0c7f90d702fc471641711b0b500d261a740740f6a2b2bd916028f755d7d

    • SHA512

      2c9fceda5a8e5e306fd5986ebc44cefb22167d1c62f1adb3720ad0e1a494983eb5015b5d0e9b654c42435fe2d51d6551f5c3de867bfba361e8eb30dc5f19f0eb

    • SSDEEP

      12288:UZWtI6RkGOB06UOB0vwOcOB06UOB0vwOcOB06UOB0vwOcOB064ut:UuhaGOkOAmOkOAmOkOAmOx

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks