Overview

overview

10

Static

static

3

99a27dad0d...18.exe

windows7-x64

10

99a27dad0d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    99a27dad0d3c55d5fa021f66f011172c_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240606-az3ccsdg78

  • MD5

    99a27dad0d3c55d5fa021f66f011172c

  • SHA1

    1a356c75bee342edfcf01cc8bf5463c81f9feaa4

  • SHA256

    5c3376a99e907d793e67ed21fea5a7dc08e193ec79b8f24871700a706c90a663

  • SHA512

    f322f004701498e6e57e7278ea9047e4ea282b5ac574528231d88dd04fe16d8251eaf4e976781e27a38d37d1959d1ae5f6ae66ca3f7378cc291a062462e05311

  • SSDEEP

    12288:UZWtI6RkPunuVO9unulOJunuVO9unulOJunuVO9unulOJunuVO9unuxrR1:UuhaE1

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      99a27dad0d3c55d5fa021f66f011172c_JaffaCakes118

    • Size

      1.5MB

    • MD5

      99a27dad0d3c55d5fa021f66f011172c

    • SHA1

      1a356c75bee342edfcf01cc8bf5463c81f9feaa4

    • SHA256

      5c3376a99e907d793e67ed21fea5a7dc08e193ec79b8f24871700a706c90a663

    • SHA512

      f322f004701498e6e57e7278ea9047e4ea282b5ac574528231d88dd04fe16d8251eaf4e976781e27a38d37d1959d1ae5f6ae66ca3f7378cc291a062462e05311

    • SSDEEP

      12288:UZWtI6RkPunuVO9unulOJunuVO9unulOJunuVO9unulOJunuVO9unuxrR1:UuhaE1

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks