Overview

overview

8

Static

static

3

21b801fc63...18.exe

windows7-x64

8

21b801fc63...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    21b801fc637b3c8ef0d56afb17796fcd_JaffaCakes118

  • Size

    68KB

  • Sample

    240703-kg2m8ayemj

  • MD5

    21b801fc637b3c8ef0d56afb17796fcd

  • SHA1

    3b378186f640db5d28f7e2ff0535fe8ab5da2486

  • SHA256

    ad2b6b2a139b443f151bbefdae7518ad10dbd1aa2b371724e8304e030bad5de4

  • SHA512

    7dadb0bce8bbd0b93ea46da019842449934744e790d649a750b539472a511f3a8c0f6ae1fd60164ab46b48e8628978e59afb9e3d505a6228edd067a2ce0cb373

  • SSDEEP

    1536:zIxrWCqtIO6nToIfdy6PTnEDhGKW5KEvZjys7Sl:+rWJnWTBfdy67nYF6HygSl

Score
8/10
persistence

Malware Config

Targets

    • Target

      21b801fc637b3c8ef0d56afb17796fcd_JaffaCakes118

    • Size

      68KB

    • MD5

      21b801fc637b3c8ef0d56afb17796fcd

    • SHA1

      3b378186f640db5d28f7e2ff0535fe8ab5da2486

    • SHA256

      ad2b6b2a139b443f151bbefdae7518ad10dbd1aa2b371724e8304e030bad5de4

    • SHA512

      7dadb0bce8bbd0b93ea46da019842449934744e790d649a750b539472a511f3a8c0f6ae1fd60164ab46b48e8628978e59afb9e3d505a6228edd067a2ce0cb373

    • SSDEEP

      1536:zIxrWCqtIO6nToIfdy6PTnEDhGKW5KEvZjys7Sl:+rWJnWTBfdy67nYF6HygSl

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks