Overview

overview

8

Static

static

3

289def475d...18.exe

windows7-x64

8

289def475d...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    289def475d0d89ce44451e3769bf9547_JaffaCakes118

  • Size

    3.7MB

  • Sample

    240706-sl5vfasbrn

  • MD5

    289def475d0d89ce44451e3769bf9547

  • SHA1

    5dd2e3a53032e10a6931451765d03c8dbb4c3b28

  • SHA256

    36cb64788c484f3220f70bcc4e8229464086b471a86afa4450a70e3ed5854c43

  • SHA512

    50fb73c1c2e9db824bb71c6e0ddcb0e85ba18d5356596bd5337530a8f447b62adbc6059fcc20e567c87bb5ef6a0f1a6aea30e628eabacb842423d6c9dc16eeab

  • SSDEEP

    98304:W7ixOKT6kTbWwqNsNnRZ6u8VfaJcIWQnYnYJrgP4e5FkvevF:g6bNwYRl8VCI3NP4eXSe9

Score
8/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      289def475d0d89ce44451e3769bf9547_JaffaCakes118

    • Size

      3.7MB

    • MD5

      289def475d0d89ce44451e3769bf9547

    • SHA1

      5dd2e3a53032e10a6931451765d03c8dbb4c3b28

    • SHA256

      36cb64788c484f3220f70bcc4e8229464086b471a86afa4450a70e3ed5854c43

    • SHA512

      50fb73c1c2e9db824bb71c6e0ddcb0e85ba18d5356596bd5337530a8f447b62adbc6059fcc20e567c87bb5ef6a0f1a6aea30e628eabacb842423d6c9dc16eeab

    • SSDEEP

      98304:W7ixOKT6kTbWwqNsNnRZ6u8VfaJcIWQnYnYJrgP4e5FkvevF:g6bNwYRl8VCI3NP4eXSe9

    Score
    8/10
    evasionexecutionpersistence

    • Stops running service(s)

      evasionexecution

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks