Overview

overview

10

Static

static

1

34febe6511...18.exe

windows7-x64

10

34febe6511...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    34febe651102e901d1960e6f9e790326_JaffaCakes118

  • Size

    199KB

  • Sample

    240710-q7h7fstfra

  • MD5

    34febe651102e901d1960e6f9e790326

  • SHA1

    ee776bc81a56626080d2f44dd747283d3ef533ed

  • SHA256

    68d8ab035fe3ac66568b8a7edcdea0ed7072a7e0b8854ae06380bcca9d7c65d6

  • SHA512

    e2555062ce811d9c763ff7b17e45a242669a6dc2f7614731d3e2c0e8b761063e1c87d15cf572d31c7bc91aaf587d99f3bdc068bd6c3529ed7749c212cc6cb682

  • SSDEEP

    6144:72+/ns/HPH3MTaeNLlBAaH/stRmdjDAw+63BMKp:7pnwHf3MmeNpBj/NM6lp

Score
10/10
evasion

Malware Config

Targets

    • Target

      34febe651102e901d1960e6f9e790326_JaffaCakes118

    • Size

      199KB

    • MD5

      34febe651102e901d1960e6f9e790326

    • SHA1

      ee776bc81a56626080d2f44dd747283d3ef533ed

    • SHA256

      68d8ab035fe3ac66568b8a7edcdea0ed7072a7e0b8854ae06380bcca9d7c65d6

    • SHA512

      e2555062ce811d9c763ff7b17e45a242669a6dc2f7614731d3e2c0e8b761063e1c87d15cf572d31c7bc91aaf587d99f3bdc068bd6c3529ed7749c212cc6cb682

    • SSDEEP

      6144:72+/ns/HPH3MTaeNLlBAaH/stRmdjDAw+63BMKp:7pnwHf3MmeNpBj/NM6lp

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks