Overview

overview

10

Static

static

3

01732b6e6b...18.exe

windows7-x64

10

01732b6e6b...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    01732b6e6b7ebe6efed4369ea4aa8fb0_JaffaCakes118

  • Size

    206KB

  • Sample

    240620-awlv7sygjg

  • MD5

    01732b6e6b7ebe6efed4369ea4aa8fb0

  • SHA1

    262e971df34b999f17843a537532fcc275beb163

  • SHA256

    4584282c886f57b2577b19a83d842f7d48595ad91487669e3906ae2601f7f4f2

  • SHA512

    837c9e2ab0041b6f3b616b4984f5a6229e67b0d127e72dee5b762ee21282d72ff3260fb94532bbd894fed6341febde1ea2d18b373ae3526f82476b91d945b170

  • SSDEEP

    3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unX:zvEN2U+T6i5LirrllHy4HUcMQY6u

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      01732b6e6b7ebe6efed4369ea4aa8fb0_JaffaCakes118

    • Size

      206KB

    • MD5

      01732b6e6b7ebe6efed4369ea4aa8fb0

    • SHA1

      262e971df34b999f17843a537532fcc275beb163

    • SHA256

      4584282c886f57b2577b19a83d842f7d48595ad91487669e3906ae2601f7f4f2

    • SHA512

      837c9e2ab0041b6f3b616b4984f5a6229e67b0d127e72dee5b762ee21282d72ff3260fb94532bbd894fed6341febde1ea2d18b373ae3526f82476b91d945b170

    • SSDEEP

      3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unX:zvEN2U+T6i5LirrllHy4HUcMQY6u

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks