Overview

overview

7

Static

static

3

15cbb1a8e1...18.exe

windows7-x64

7

15cbb1a8e1...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    15cbb1a8e18383fe3424e92374a24265_JaffaCakes118

  • Size

    784KB

  • Sample

    240627-ndmxfaybpb

  • MD5

    15cbb1a8e18383fe3424e92374a24265

  • SHA1

    d6c11d978a4fa17ac3677f017517d6b1cde3cff4

  • SHA256

    50a4f792ef73698151a61287a8aa859149830ab5d5377f49a35cfedfc457f29c

  • SHA512

    5f22e2bcd729ed2d8b3987d00c2d65551256927f53c3d5f3d47457d67665134e73f6b041c648b9eaa4fd4eddfe3674bae80cfbb0181bf1975017e83140c7544d

  • SSDEEP

    12288:TLbmf+P0YYsKkg1jIMUQOXUUtW+4q8LCw3P2JCYTOtdpy/bln:TLiWP0JsKkAKXUUtl4q8ma8Tsy/B

Score
7/10

Malware Config

Targets

    • Target

      15cbb1a8e18383fe3424e92374a24265_JaffaCakes118

    • Size

      784KB

    • MD5

      15cbb1a8e18383fe3424e92374a24265

    • SHA1

      d6c11d978a4fa17ac3677f017517d6b1cde3cff4

    • SHA256

      50a4f792ef73698151a61287a8aa859149830ab5d5377f49a35cfedfc457f29c

    • SHA512

      5f22e2bcd729ed2d8b3987d00c2d65551256927f53c3d5f3d47457d67665134e73f6b041c648b9eaa4fd4eddfe3674bae80cfbb0181bf1975017e83140c7544d

    • SSDEEP

      12288:TLbmf+P0YYsKkg1jIMUQOXUUtW+4q8LCw3P2JCYTOtdpy/bln:TLiWP0JsKkAKXUUtl4q8ma8Tsy/B

    Score
    7/10

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks