Overview

overview

8

Static

static

3

2939a63c9c...18.dll

windows7-x64

5

2939a63c9c...18.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2939a63c9c08799d497228e888e9676d_JaffaCakes118

  • Size

    122KB

  • Sample

    240706-xdgvvssckh

  • MD5

    2939a63c9c08799d497228e888e9676d

  • SHA1

    670b7bf63e56a10a2936d141a71019b86fd23476

  • SHA256

    c24a964affd7d632799cb3275ba600ca73b5c8eaa154107e1ca4c5949add357f

  • SHA512

    db3380625ce4b4923933b5b9f88388d0795d2826f5ba090fe395059aca067fcbd54b367d2babcfdd9427caab98b06ec8c8c3db1e9a396d31c913e715c39f3a33

  • SSDEEP

    3072:VnbJpEypKc+JjCc3Jcy006iSmmG/6icKdYlO1:RbJpd6GcOrmmi9cKd2O1

Score
8/10
persistence

Malware Config

Targets

    • Target

      2939a63c9c08799d497228e888e9676d_JaffaCakes118

    • Size

      122KB

    • MD5

      2939a63c9c08799d497228e888e9676d

    • SHA1

      670b7bf63e56a10a2936d141a71019b86fd23476

    • SHA256

      c24a964affd7d632799cb3275ba600ca73b5c8eaa154107e1ca4c5949add357f

    • SHA512

      db3380625ce4b4923933b5b9f88388d0795d2826f5ba090fe395059aca067fcbd54b367d2babcfdd9427caab98b06ec8c8c3db1e9a396d31c913e715c39f3a33

    • SSDEEP

      3072:VnbJpEypKc+JjCc3Jcy006iSmmG/6icKdYlO1:RbJpd6GcOrmmi9cKd2O1

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Sets service image path in registry

      persistence

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks