Overview

overview

10

Static

static

3

b63a651a73...18.exe

windows7-x64

10

b63a651a73...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b63a651a739718b416a40e59676d94e4_JaffaCakes118

  • Size

    851KB

  • Sample

    240617-b5ec6aycqh

  • MD5

    b63a651a739718b416a40e59676d94e4

  • SHA1

    d08c71cb9e13988bd30f3955228714ad0fa56d79

  • SHA256

    b0430032f906e78591001da4a7e7ac8dbcc6d9280c3d04eba5e17cc735b2ce25

  • SHA512

    44cc5202b74dad93ee7f04e8c7af24e79ef26732585b9375ef1e247fd3325570709cefcd83f9daec63823a2f7d399ebf956accaf61e2bde16e812929eb54de68

  • SSDEEP

    12288:UZWtI6RkderQZb+md4w1UXakuVXpIys7bA:UuhaderQZb+md4wmqtXpObA

Score
10/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      b63a651a739718b416a40e59676d94e4_JaffaCakes118

    • Size

      851KB

    • MD5

      b63a651a739718b416a40e59676d94e4

    • SHA1

      d08c71cb9e13988bd30f3955228714ad0fa56d79

    • SHA256

      b0430032f906e78591001da4a7e7ac8dbcc6d9280c3d04eba5e17cc735b2ce25

    • SHA512

      44cc5202b74dad93ee7f04e8c7af24e79ef26732585b9375ef1e247fd3325570709cefcd83f9daec63823a2f7d399ebf956accaf61e2bde16e812929eb54de68

    • SSDEEP

      12288:UZWtI6RkderQZb+md4w1UXakuVXpIys7bA:UuhaderQZb+md4wmqtXpObA

    Score
    10/10
    evasionexecutionpersistence

    • Disables service(s)

      evasionexecution

    • Modifies visibility of file extensions in Explorer

      evasion

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

      evasion

    • Sets file execution options in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks