Overview

overview

8

Static

static

3

30d198276b...18.exe

windows7-x64

8

30d198276b...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    30d198276bfaf9af87d9737f45205436_JaffaCakes118

  • Size

    180KB

  • Sample

    240709-r7pjxayfmk

  • MD5

    30d198276bfaf9af87d9737f45205436

  • SHA1

    27e045e0502c7d3bd732e5c970ae5990f4c3011a

  • SHA256

    91fd8c45536fc35d7f4bf0c9d4c62b66e6b8127d9fbd08335548bede60dfeb04

  • SHA512

    85d1912489664d89194b54d897d147200b004305a5f0903e81a7ebb378c87a7c7b21b1a3bbb799177e8750eff2cfcdc07315bc6c1428aa666aa0f56bd8af5cac

  • SSDEEP

    3072:MRAhhcsxgAJuK7bZD01GoI0ONtNmlngmx5MODNKUkubjuuyXHb/RS4F:MRAhhJxX7bNIFlJYUvSL/sY

Score
8/10
persistence

Malware Config

Targets

    • Target

      30d198276bfaf9af87d9737f45205436_JaffaCakes118

    • Size

      180KB

    • MD5

      30d198276bfaf9af87d9737f45205436

    • SHA1

      27e045e0502c7d3bd732e5c970ae5990f4c3011a

    • SHA256

      91fd8c45536fc35d7f4bf0c9d4c62b66e6b8127d9fbd08335548bede60dfeb04

    • SHA512

      85d1912489664d89194b54d897d147200b004305a5f0903e81a7ebb378c87a7c7b21b1a3bbb799177e8750eff2cfcdc07315bc6c1428aa666aa0f56bd8af5cac

    • SSDEEP

      3072:MRAhhcsxgAJuK7bZD01GoI0ONtNmlngmx5MODNKUkubjuuyXHb/RS4F:MRAhhJxX7bNIFlJYUvSL/sY

    Score
    8/10
    persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks