Overview

overview

10

Static

static

3

93818c267a...18.exe

windows7-x64

10

93818c267a...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    93818c267a6cd753d18dfdd6d22c0431_JaffaCakes118

  • Size

    819KB

  • Sample

    240604-d4lryscd65

  • MD5

    93818c267a6cd753d18dfdd6d22c0431

  • SHA1

    fd5913e9fbde47eaa08c7dd2afd3eaa23d240d9f

  • SHA256

    6dcb2e656eabcfc1bbf96ce96543a059a1fce4f8c65471ce61035406e857f5a9

  • SHA512

    aac879c9a8cd74e8a2e6ff3de7c335f17bc0df5146e69ac74c222839416a8cc97526ae672ee0ff3e65b9e87efacd77d751c78a5973bebc23c9a5141c5bb12bd8

  • SSDEEP

    6144:UZfec9EbXDk6RkdKJrG1VVE+I2GFrQZb++tdsHP4+QfI6U9/UOPSe570Szp3irGn:UZWtI6RkcuxerQZb+md4w1UWOB0Ju02

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      93818c267a6cd753d18dfdd6d22c0431_JaffaCakes118

    • Size

      819KB

    • MD5

      93818c267a6cd753d18dfdd6d22c0431

    • SHA1

      fd5913e9fbde47eaa08c7dd2afd3eaa23d240d9f

    • SHA256

      6dcb2e656eabcfc1bbf96ce96543a059a1fce4f8c65471ce61035406e857f5a9

    • SHA512

      aac879c9a8cd74e8a2e6ff3de7c335f17bc0df5146e69ac74c222839416a8cc97526ae672ee0ff3e65b9e87efacd77d751c78a5973bebc23c9a5141c5bb12bd8

    • SSDEEP

      6144:UZfec9EbXDk6RkdKJrG1VVE+I2GFrQZb++tdsHP4+QfI6U9/UOPSe570Szp3irGn:UZWtI6RkcuxerQZb+md4w1UWOB0Ju02

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks