Overview

overview

10

Static

static

3

6930863975...18.exe

windows7-x64

10

6930863975...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6930863975379c5daa7cd0ec12272bdc_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240523-a47smsfd94

  • MD5

    6930863975379c5daa7cd0ec12272bdc

  • SHA1

    bda68873e67d7dc8f3d5d8943013b808642a3658

  • SHA256

    b829e9a6b8d1fef4781b7423cbb6fc7e0ea9c9f74aa35bedff8b0bdb19c6b0be

  • SHA512

    07125125f725486020f411802e15f857fff3fba1d52a24bad813bb0d0cde06da288bc8fb73cca8ca1adb48f73f58f68fd81b80ce1794e9517eb93979f793a8da

  • SSDEEP

    24576:Uuhag2eZJ8NI8G2eZJ8NI8G2eZJ8NI8G2eZJ8NI8ar:bH8o8o8o8ar

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      6930863975379c5daa7cd0ec12272bdc_JaffaCakes118

    • Size

      1.5MB

    • MD5

      6930863975379c5daa7cd0ec12272bdc

    • SHA1

      bda68873e67d7dc8f3d5d8943013b808642a3658

    • SHA256

      b829e9a6b8d1fef4781b7423cbb6fc7e0ea9c9f74aa35bedff8b0bdb19c6b0be

    • SHA512

      07125125f725486020f411802e15f857fff3fba1d52a24bad813bb0d0cde06da288bc8fb73cca8ca1adb48f73f58f68fd81b80ce1794e9517eb93979f793a8da

    • SSDEEP

      24576:Uuhag2eZJ8NI8G2eZJ8NI8G2eZJ8NI8G2eZJ8NI8ar:bH8o8o8o8ar

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks