Overview

overview

10

Static

static

3

0fe0e8736b...18.exe

windows7-x64

10

0fe0e8736b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fe0e8736beca525247d2c952a086f7f_JaffaCakes118

  • Size

    44KB

  • Sample

    240625-26zctszbld

  • MD5

    0fe0e8736beca525247d2c952a086f7f

  • SHA1

    22ee647d8285dfbb9d031b7b259ee68129ce59b6

  • SHA256

    4d83ebffa15f1977ea6f4aaef47c874d770a2a9e2ebd74b8e0298a5277f1a390

  • SHA512

    eec8a7ff6c60a0ee4bfd0baff8069163a7071e79bcbdf77389f26134b138a034c4b248d949aa9541de3a55a3699ea374f63e8fb9d6413e04ca1c06c721da968e

  • SSDEEP

    384:/wm3UqRKwBBUuRXt8eX2c9yfnH+8wdKRSJMZgJOftuOY+GHHbrg/XqRKwBBrm3:tPRd8GVQ+jJOgJOo6r

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0fe0e8736beca525247d2c952a086f7f_JaffaCakes118

    • Size

      44KB

    • MD5

      0fe0e8736beca525247d2c952a086f7f

    • SHA1

      22ee647d8285dfbb9d031b7b259ee68129ce59b6

    • SHA256

      4d83ebffa15f1977ea6f4aaef47c874d770a2a9e2ebd74b8e0298a5277f1a390

    • SHA512

      eec8a7ff6c60a0ee4bfd0baff8069163a7071e79bcbdf77389f26134b138a034c4b248d949aa9541de3a55a3699ea374f63e8fb9d6413e04ca1c06c721da968e

    • SSDEEP

      384:/wm3UqRKwBBUuRXt8eX2c9yfnH+8wdKRSJMZgJOftuOY+GHHbrg/XqRKwBBrm3:tPRd8GVQ+jJOgJOo6r

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks