Overview

overview

10

Static

static

3

b18dbf9995...18.exe

windows7-x64

10

b18dbf9995...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b18dbf999535246627b4af5ac50dd4d9_JaffaCakes118

  • Size

    831KB

  • Sample

    240616-d4mz1ssalj

  • MD5

    b18dbf999535246627b4af5ac50dd4d9

  • SHA1

    5a59bec5afee9686112cb8a4bcac39d142ee7bb7

  • SHA256

    182a809bacede51c6252da4594914915236eb583b384f902a08aaae343d6b7f8

  • SHA512

    d83ac3a78a357bba3e339bbeed32d5991a9663246a58affb3099b136ea8cb9eaf054f0fe4fafb929fa77b523b18eb21cc371fb1e525f5622003ce305c908dc5f

  • SSDEEP

    6144:UZfec9EbXDk6RkNKJrG1VVE+Ih/UOPSe570Szp3irG1VVE+IRuHOirG1VVE+Ih/X:UZWtI6RkMupOB0pu9OmupOB0pumCPZ/

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      b18dbf999535246627b4af5ac50dd4d9_JaffaCakes118

    • Size

      831KB

    • MD5

      b18dbf999535246627b4af5ac50dd4d9

    • SHA1

      5a59bec5afee9686112cb8a4bcac39d142ee7bb7

    • SHA256

      182a809bacede51c6252da4594914915236eb583b384f902a08aaae343d6b7f8

    • SHA512

      d83ac3a78a357bba3e339bbeed32d5991a9663246a58affb3099b136ea8cb9eaf054f0fe4fafb929fa77b523b18eb21cc371fb1e525f5622003ce305c908dc5f

    • SSDEEP

      6144:UZfec9EbXDk6RkNKJrG1VVE+Ih/UOPSe570Szp3irG1VVE+IRuHOirG1VVE+Ih/X:UZWtI6RkMupOB0pu9OmupOB0pumCPZ/

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks