Overview

overview

10

Static

static

3

0ddc9c5304...18.exe

windows7-x64

10

0ddc9c5304...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ddc9c5304cbfb94c113b0e791fd95d7_JaffaCakes118

  • Size

    13KB

  • Sample

    240625-ncw4qawfjb

  • MD5

    0ddc9c5304cbfb94c113b0e791fd95d7

  • SHA1

    745124fbc9f0cf214bb8ad80272b2fb942aacf28

  • SHA256

    63a3c36fab52b2193574e1fa2f384787608f39f84fbce7b7b20e2940c21a7fe8

  • SHA512

    c6ff73754defb8132a5ad196b50d95fc71c9219b6fcb14acb063b556a713356f88788dbf42ef0ce36f0875c35f9daf6223774ac2c47a03bcadad386452d33d47

  • SSDEEP

    192:TNnYdFL2tJDaCGDFx5U7x+3K+94C/AaqlbhJONx4kQiHLkjK+MC1WveypScNJTy3:TNyFL3CN7x894CopZA4kTrwlMJvdg

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      0ddc9c5304cbfb94c113b0e791fd95d7_JaffaCakes118

    • Size

      13KB

    • MD5

      0ddc9c5304cbfb94c113b0e791fd95d7

    • SHA1

      745124fbc9f0cf214bb8ad80272b2fb942aacf28

    • SHA256

      63a3c36fab52b2193574e1fa2f384787608f39f84fbce7b7b20e2940c21a7fe8

    • SHA512

      c6ff73754defb8132a5ad196b50d95fc71c9219b6fcb14acb063b556a713356f88788dbf42ef0ce36f0875c35f9daf6223774ac2c47a03bcadad386452d33d47

    • SSDEEP

      192:TNnYdFL2tJDaCGDFx5U7x+3K+94C/AaqlbhJONx4kQiHLkjK+MC1WveypScNJTy3:TNyFL3CN7x894CopZA4kTrwlMJvdg

    Score
    10/10
    evasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables use of System Restore points

      evasion

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks