Overview

overview

8

Static

static

3

28e56b3ea9...18.exe

windows7-x64

8

28e56b3ea9...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28e56b3ea9d5ab6bc2924f2dc72689f0_JaffaCakes118

  • Size

    898KB

  • Sample

    240706-vc8k3swakp

  • MD5

    28e56b3ea9d5ab6bc2924f2dc72689f0

  • SHA1

    4a5c279166c4ad5d39b6d14eac23ec1726ddc387

  • SHA256

    00af2735bab04fa2265a313fc6237e4093293a724ca14588865a5e569172f89f

  • SHA512

    3d81c84e3cf8b3b8f6dca3db1052add606f77d6c4e5c43f2e95ab64764e7ccc03c81343ca6a303d9985ca3c8815cb86ca8bb5bc9204f62c1a57b2f8d52d92afe

  • SSDEEP

    24576:xgmbiorFTnB2HNjEgH9VUP8k+/WMbyaAwXv:+mbiiT4Hl1HaQWMbyaP

Score
8/10
persistence

Malware Config

Targets

    • Target

      28e56b3ea9d5ab6bc2924f2dc72689f0_JaffaCakes118

    • Size

      898KB

    • MD5

      28e56b3ea9d5ab6bc2924f2dc72689f0

    • SHA1

      4a5c279166c4ad5d39b6d14eac23ec1726ddc387

    • SHA256

      00af2735bab04fa2265a313fc6237e4093293a724ca14588865a5e569172f89f

    • SHA512

      3d81c84e3cf8b3b8f6dca3db1052add606f77d6c4e5c43f2e95ab64764e7ccc03c81343ca6a303d9985ca3c8815cb86ca8bb5bc9204f62c1a57b2f8d52d92afe

    • SSDEEP

      24576:xgmbiorFTnB2HNjEgH9VUP8k+/WMbyaAwXv:+mbiiT4Hl1HaQWMbyaP

    Score
    8/10
    persistence

    • Server Software Component: Terminal Services DLL

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks