Overview

overview

8

Static

static

3

277820bb35...18.dll

windows7-x64

5

277820bb35...18.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    277820bb355cd986c6ed34e07db1f33f_JaffaCakes118

  • Size

    118KB

  • Sample

    240706-gnr6kszfqe

  • MD5

    277820bb355cd986c6ed34e07db1f33f

  • SHA1

    4a8286ecda9e9a53c7f2f2e0ecbd286b9e4b055b

  • SHA256

    ea41aaa7c833ddbca9ff3a47d1d955eaa29a85316fbb03ec23756ad74fb237ea

  • SHA512

    5164a261ab8d6dac2d13d79f66b5e171d54a33ca63edb8ac83c489fb24f9b3792ab5de0eab9b6e5c20f451c7951a6bcbdb18fc3ce07944ea525fcdb96e125cf2

  • SSDEEP

    1536:4D8NU1i2/QA+SR6OS5BSnRMbEdZppGaXDT5EQO4/JbEdPo0Ad4dk16nEnKdXL4Zm:4ANYTQYMt2RJvDT6QztEBsEkgEnKds0

Score
8/10
persistence

Malware Config

Targets

    • Target

      277820bb355cd986c6ed34e07db1f33f_JaffaCakes118

    • Size

      118KB

    • MD5

      277820bb355cd986c6ed34e07db1f33f

    • SHA1

      4a8286ecda9e9a53c7f2f2e0ecbd286b9e4b055b

    • SHA256

      ea41aaa7c833ddbca9ff3a47d1d955eaa29a85316fbb03ec23756ad74fb237ea

    • SHA512

      5164a261ab8d6dac2d13d79f66b5e171d54a33ca63edb8ac83c489fb24f9b3792ab5de0eab9b6e5c20f451c7951a6bcbdb18fc3ce07944ea525fcdb96e125cf2

    • SSDEEP

      1536:4D8NU1i2/QA+SR6OS5BSnRMbEdZppGaXDT5EQO4/JbEdPo0Ad4dk16nEnKdXL4Zm:4ANYTQYMt2RJvDT6QztEBsEkgEnKds0

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Sets service image path in registry

      persistence

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks