Overview

overview

10

Static

static

3

91c88697bf...18.exe

windows7-x64

10

91c88697bf...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    91c88697bfc2d69c2685cc44b28a45e7_JaffaCakes118

  • Size

    542KB

  • Sample

    240603-pnsfcaff95

  • MD5

    91c88697bfc2d69c2685cc44b28a45e7

  • SHA1

    a5213302a7829dad2f4f43c795446dfbde95a946

  • SHA256

    7f01b44797ad6ebbbd12bc5b08ce8afef26f52fd177309bd0e0527c666892d9d

  • SHA512

    031184038deded6974b7762879b8a9b96dc8dcdc035a7db4c295c9c085583593f0a5ac8b264a34a6619b5587df640de68d4f00b4d0eb0523e70c3d753c3e482f

  • SSDEEP

    12288:UZWtI6Rk9OB0JureZJys73dOvXDpNjNe8f:Uuha9OXeZJ8NI8f

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      91c88697bfc2d69c2685cc44b28a45e7_JaffaCakes118

    • Size

      542KB

    • MD5

      91c88697bfc2d69c2685cc44b28a45e7

    • SHA1

      a5213302a7829dad2f4f43c795446dfbde95a946

    • SHA256

      7f01b44797ad6ebbbd12bc5b08ce8afef26f52fd177309bd0e0527c666892d9d

    • SHA512

      031184038deded6974b7762879b8a9b96dc8dcdc035a7db4c295c9c085583593f0a5ac8b264a34a6619b5587df640de68d4f00b4d0eb0523e70c3d753c3e482f

    • SSDEEP

      12288:UZWtI6Rk9OB0JureZJys73dOvXDpNjNe8f:Uuha9OXeZJ8NI8f

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks