Overview

overview

10

Static

static

3

06d6a7cd8d...18.dll

windows7-x64

10

06d6a7cd8d...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    06d6a7cd8dad8f612b9e0931e5206220_JaffaCakes118

  • Size

    236KB

  • Sample

    240624-btk2kashlf

  • MD5

    06d6a7cd8dad8f612b9e0931e5206220

  • SHA1

    28f5725c8ab843c4a6db53183460e6f196a01bef

  • SHA256

    dadca9e6f71d07582bee4969133e7c406aa02beaf9a515973cc211dd83ecde74

  • SHA512

    7677538095157edbcc247df3aff88c0633d9f2a1b1af912c2388b9af140f5e3567e1f4887a64d652838ad75036968f931a6871c7524d7eebd1eaf88e1d6ffa29

  • SSDEEP

    3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIZ:+Qj9U3jwO3rt52

Score
10/10
persistence

Malware Config

Targets

    • Target

      06d6a7cd8dad8f612b9e0931e5206220_JaffaCakes118

    • Size

      236KB

    • MD5

      06d6a7cd8dad8f612b9e0931e5206220

    • SHA1

      28f5725c8ab843c4a6db53183460e6f196a01bef

    • SHA256

      dadca9e6f71d07582bee4969133e7c406aa02beaf9a515973cc211dd83ecde74

    • SHA512

      7677538095157edbcc247df3aff88c0633d9f2a1b1af912c2388b9af140f5e3567e1f4887a64d652838ad75036968f931a6871c7524d7eebd1eaf88e1d6ffa29

    • SSDEEP

      3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIZ:+Qj9U3jwO3rt52

    Score
    10/10
    persistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks