Overview

overview

10

Static

static

3

6910ec4dc1...18.exe

windows7-x64

10

6910ec4dc1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6910ec4dc1ce61292601268a9ff94a48_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240522-3y37gsdh4s

  • MD5

    6910ec4dc1ce61292601268a9ff94a48

  • SHA1

    31031cc072ed84df42c579994aa6c872459d9563

  • SHA256

    00eeb40b0225bbf0d4b95e25278311836b66a4de872ff179d46e8983d35fb806

  • SHA512

    0a13b0fc8aebac00e6af9f473ce8f95f5a8af636ff01d4adba8ff026edeef4b5a70dd2504889c97c857d65f2d03c5068218ff6b1aca6ec6c1dab96f09654a050

  • SSDEEP

    24576:UuhaAerQZb+md4wmieZJ8NI8FierQZb+md4wmieZJ8NI8Fk:bherQZbd2f8FierQZbd2f8Fk

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      6910ec4dc1ce61292601268a9ff94a48_JaffaCakes118

    • Size

      1.5MB

    • MD5

      6910ec4dc1ce61292601268a9ff94a48

    • SHA1

      31031cc072ed84df42c579994aa6c872459d9563

    • SHA256

      00eeb40b0225bbf0d4b95e25278311836b66a4de872ff179d46e8983d35fb806

    • SHA512

      0a13b0fc8aebac00e6af9f473ce8f95f5a8af636ff01d4adba8ff026edeef4b5a70dd2504889c97c857d65f2d03c5068218ff6b1aca6ec6c1dab96f09654a050

    • SSDEEP

      24576:UuhaAerQZb+md4wmieZJ8NI8FierQZb+md4wmieZJ8NI8Fk:bherQZbd2f8FierQZbd2f8Fk

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks