Overview

overview

8

Static

static

3

0dd79e3643...18.exe

windows7-x64

7

0dd79e3643...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0dd79e364364aa64381242942fecbda3_JaffaCakes118

  • Size

    398KB

  • Sample

    240625-m89h9aygrn

  • MD5

    0dd79e364364aa64381242942fecbda3

  • SHA1

    32ea31863c0966ef09f8ae460306e5cf6c34db7c

  • SHA256

    b67018512894d3b3422f0f856756229ace8e18044e0db51a4141b078bc96cb1d

  • SHA512

    71c0c70816e38001bea26e3dabb881bf6ff22ce4e87a2150247d40bfb0c5d950c30e348a9411e3acacd6797a33d0973d2c6320e1473cbd28eb9661bdd4875ae7

  • SSDEEP

    6144:CPPrO426Ep+NQFj8YdCioiqBb1lo/GWyJusttUnVzfCN/WQ3EEs8Pl9Bnsz+d4:0r5FSfdZTUREGFpt0fw/WQ3EEs83mzw4

Score
8/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      0dd79e364364aa64381242942fecbda3_JaffaCakes118

    • Size

      398KB

    • MD5

      0dd79e364364aa64381242942fecbda3

    • SHA1

      32ea31863c0966ef09f8ae460306e5cf6c34db7c

    • SHA256

      b67018512894d3b3422f0f856756229ace8e18044e0db51a4141b078bc96cb1d

    • SHA512

      71c0c70816e38001bea26e3dabb881bf6ff22ce4e87a2150247d40bfb0c5d950c30e348a9411e3acacd6797a33d0973d2c6320e1473cbd28eb9661bdd4875ae7

    • SSDEEP

      6144:CPPrO426Ep+NQFj8YdCioiqBb1lo/GWyJusttUnVzfCN/WQ3EEs8Pl9Bnsz+d4:0r5FSfdZTUREGFpt0fw/WQ3EEs83mzw4

    Score
    8/10
    evasionpersistencetrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks