Overview

overview

10

Static

static

3

75743bbecc...18.exe

windows7-x64

10

75743bbecc...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    75743bbecc25699d5353c2bcb5f871bd_JaffaCakes118

  • Size

    526KB

  • Sample

    240526-pgj6dscd98

  • MD5

    75743bbecc25699d5353c2bcb5f871bd

  • SHA1

    6fe69e34806674b2c6ba8bb5493e59af05d7d0ba

  • SHA256

    c6d25c21182495055a255c9de31178445f6f29c414716a6e5a3a2fc3e500c870

  • SHA512

    e46cfdc1490953d9c2b110c3346e6a21c46c44002a6497acde28fb60808a40e43b163548344d0e8ef85d900ba68bbe3894abe3b54eaa4ca09211ca8d1ee691b5

  • SSDEEP

    6144:UZfec9EbXDk6RkJKJrG1VVE+IwrG1VVE+IBuHOGrG1VVE+IwrG1VVE+I6:UZWtI6RkIunudO6unu5

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      75743bbecc25699d5353c2bcb5f871bd_JaffaCakes118

    • Size

      526KB

    • MD5

      75743bbecc25699d5353c2bcb5f871bd

    • SHA1

      6fe69e34806674b2c6ba8bb5493e59af05d7d0ba

    • SHA256

      c6d25c21182495055a255c9de31178445f6f29c414716a6e5a3a2fc3e500c870

    • SHA512

      e46cfdc1490953d9c2b110c3346e6a21c46c44002a6497acde28fb60808a40e43b163548344d0e8ef85d900ba68bbe3894abe3b54eaa4ca09211ca8d1ee691b5

    • SSDEEP

      6144:UZfec9EbXDk6RkJKJrG1VVE+IwrG1VVE+IBuHOGrG1VVE+IwrG1VVE+I6:UZWtI6RkIunudO6unu5

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks