Overview

overview

10

Static

static

3

355bd065e5...18.exe

windows7-x64

10

355bd065e5...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    355bd065e524596099c4d4de4dd8f87a_JaffaCakes118

  • Size

    443KB

  • Sample

    240710-s5jfjsybmd

  • MD5

    355bd065e524596099c4d4de4dd8f87a

  • SHA1

    625a5647d01a01cc277a14410522611da7ca550c

  • SHA256

    0ef03b25a1f92425c55fa031da43f023c645e77c606d8a2b345f8020f2dfc80d

  • SHA512

    a841eb089233378a31058428a5bd82f349764734bccf866986cc314b506d824c858b528a3d7d0ac67156fdb494aaa055d653c399dacf5a119565aaf01fa97735

  • SSDEEP

    12288:28GobO+9pIYgn4qJ6oh8ETt0BzIQWeMs+GILy/8:2d4O+EYgR6+2F1/

Score
10/10
evasionpersistenceupx

Malware Config

Targets

    • Target

      355bd065e524596099c4d4de4dd8f87a_JaffaCakes118

    • Size

      443KB

    • MD5

      355bd065e524596099c4d4de4dd8f87a

    • SHA1

      625a5647d01a01cc277a14410522611da7ca550c

    • SHA256

      0ef03b25a1f92425c55fa031da43f023c645e77c606d8a2b345f8020f2dfc80d

    • SHA512

      a841eb089233378a31058428a5bd82f349764734bccf866986cc314b506d824c858b528a3d7d0ac67156fdb494aaa055d653c399dacf5a119565aaf01fa97735

    • SSDEEP

      12288:28GobO+9pIYgn4qJ6oh8ETt0BzIQWeMs+GILy/8:2d4O+EYgR6+2F1/

    Score
    10/10
    evasionpersistenceupx

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks