Overview

overview

8

Static

static

3

2a61583cd8...18.exe

windows7-x64

8

2a61583cd8...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a61583cd8b7c4ae682567091efa5b4f_JaffaCakes118

  • Size

    1.5MB

  • Sample

    240708-a2vejawfpg

  • MD5

    2a61583cd8b7c4ae682567091efa5b4f

  • SHA1

    4c2f566e4aafe16b245b42d8510f586bc1e7fab6

  • SHA256

    f29e1cd0a846a41f6531b999af14989283edf0e5055cdbe599a25d98ccfb567b

  • SHA512

    afc9735b9fe91e3b335ddfe9798fc74b9b12c31db8e5effe9a4b344d5e370f8fe3cd1a681c2dbb0dda2132c8de9a9ff5b450a7b43363998e99f1f9e0def2b572

  • SSDEEP

    24576:RpcXp0KW2fTgCa7w64VBUrbE+8iqP2k+KlrZGltxdWyjg8/6C3RBsRnBtakxcSlU:RCLkCaUAnkPJ+KfuFXC4U5xyGF1q

Score
8/10
persistence

Malware Config

Targets

    • Target

      2a61583cd8b7c4ae682567091efa5b4f_JaffaCakes118

    • Size

      1.5MB

    • MD5

      2a61583cd8b7c4ae682567091efa5b4f

    • SHA1

      4c2f566e4aafe16b245b42d8510f586bc1e7fab6

    • SHA256

      f29e1cd0a846a41f6531b999af14989283edf0e5055cdbe599a25d98ccfb567b

    • SHA512

      afc9735b9fe91e3b335ddfe9798fc74b9b12c31db8e5effe9a4b344d5e370f8fe3cd1a681c2dbb0dda2132c8de9a9ff5b450a7b43363998e99f1f9e0def2b572

    • SSDEEP

      24576:RpcXp0KW2fTgCa7w64VBUrbE+8iqP2k+KlrZGltxdWyjg8/6C3RBsRnBtakxcSlU:RCLkCaUAnkPJ+KfuFXC4U5xyGF1q

    Score
    8/10
    persistence

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks