Overview

overview

7

Static

static

3

2bf279a320...18.exe

windows7-x64

7

2bf279a320...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bf279a32030d98f062f980f62f070f0_JaffaCakes118

  • Size

    624KB

  • Sample

    240708-mac3dswgpa

  • MD5

    2bf279a32030d98f062f980f62f070f0

  • SHA1

    4d021b26cee5b0832ad9fa13fba55ecff46604d8

  • SHA256

    0bb243e840ac497770cc91481b9a3fae2143aca065d65a268f0ab9da01c0d1b2

  • SHA512

    dc94f25be5f1cef21d9956043dbe4326926b0297cd5d3467108ea57b661e3787a18c25e0adc7d0d8c70ee770dd2c850a287d1608e8b7a450c9a692511ae640ad

  • SSDEEP

    6144:naTpjJMuvLRPhkc9gI/W0pu3dd3N/3yjlQpAcsnv4bACB2nT0zzKOcUAvKzSX:8lLRPhkg/hpmdd3N/ijlQpAcsnMKLUw

Score
7/10
persistence

Malware Config

Targets

    • Target

      2bf279a32030d98f062f980f62f070f0_JaffaCakes118

    • Size

      624KB

    • MD5

      2bf279a32030d98f062f980f62f070f0

    • SHA1

      4d021b26cee5b0832ad9fa13fba55ecff46604d8

    • SHA256

      0bb243e840ac497770cc91481b9a3fae2143aca065d65a268f0ab9da01c0d1b2

    • SHA512

      dc94f25be5f1cef21d9956043dbe4326926b0297cd5d3467108ea57b661e3787a18c25e0adc7d0d8c70ee770dd2c850a287d1608e8b7a450c9a692511ae640ad

    • SSDEEP

      6144:naTpjJMuvLRPhkc9gI/W0pu3dd3N/3yjlQpAcsnv4bACB2nT0zzKOcUAvKzSX:8lLRPhkg/hpmdd3N/ijlQpAcsnMKLUw

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks