Overview

overview

10

Static

static

3

03097b0305...18.dll

windows7-x64

10

03097b0305...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    03097b03058e6f39dee836c978e54093_JaffaCakes118

  • Size

    236KB

  • Sample

    240623-2fp2gayflm

  • MD5

    03097b03058e6f39dee836c978e54093

  • SHA1

    c7c9ca0d2b06a7507c9d3f3dabfe95d053f50e97

  • SHA256

    c4c67f7c0a452aadb6daf75b60005d980aa27b5764243114e49b489d31be3454

  • SHA512

    faf5e2a07a3f4593e02d5471cba561313da14d8e07815c129e9ae798214bf996cc2d2783abfe3265245d9e99eeb333e57e974238b9b47ad5f762d9e9a601e88c

  • SSDEEP

    3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIm:+Qj9U3jwO3rt55

Score
10/10
persistence

Malware Config

Targets

    • Target

      03097b03058e6f39dee836c978e54093_JaffaCakes118

    • Size

      236KB

    • MD5

      03097b03058e6f39dee836c978e54093

    • SHA1

      c7c9ca0d2b06a7507c9d3f3dabfe95d053f50e97

    • SHA256

      c4c67f7c0a452aadb6daf75b60005d980aa27b5764243114e49b489d31be3454

    • SHA512

      faf5e2a07a3f4593e02d5471cba561313da14d8e07815c129e9ae798214bf996cc2d2783abfe3265245d9e99eeb333e57e974238b9b47ad5f762d9e9a601e88c

    • SSDEEP

      3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIm:+Qj9U3jwO3rt55

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks