Overview

overview

7

Static

static

3

314c2056de...18.exe

windows7-x64

7

314c2056de...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    314c2056de3d49a1cc498638f57d7d3c_JaffaCakes118

  • Size

    33KB

  • Sample

    240709-v1bk9avgpj

  • MD5

    314c2056de3d49a1cc498638f57d7d3c

  • SHA1

    2d7706703ae32508c26bfb83634184a16fa14623

  • SHA256

    fda5dae0c029f467702d2ca43f304dc8c785497c57348cf49da3435edc576212

  • SHA512

    b238fc663fd14a498f63f3a819e995493330430eb7465a2d527fa36296b21e3e94ba09d6a514d6449ebb3ca5d4b7c9a533e09dc72fd0c779d95c32b6752d074a

  • SSDEEP

    768:Q/u/h2wRFQp/qObNGpHT1zn/8ZDEmvRKbsuDB:7544Bzn+xMZB

Score
7/10
persistence

Malware Config

Targets

    • Target

      314c2056de3d49a1cc498638f57d7d3c_JaffaCakes118

    • Size

      33KB

    • MD5

      314c2056de3d49a1cc498638f57d7d3c

    • SHA1

      2d7706703ae32508c26bfb83634184a16fa14623

    • SHA256

      fda5dae0c029f467702d2ca43f304dc8c785497c57348cf49da3435edc576212

    • SHA512

      b238fc663fd14a498f63f3a819e995493330430eb7465a2d527fa36296b21e3e94ba09d6a514d6449ebb3ca5d4b7c9a533e09dc72fd0c779d95c32b6752d074a

    • SSDEEP

      768:Q/u/h2wRFQp/qObNGpHT1zn/8ZDEmvRKbsuDB:7544Bzn+xMZB

    Score
    7/10
    persistence

    • Deletes itself

    • Executes dropped EXE

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks