Overview

overview

10

Static

static

3

36697b1e5d...18.exe

windows7-x64

10

36697b1e5d...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    36697b1e5d1bc64c5dbc4fcfa7f4ef46_JaffaCakes118

  • Size

    88KB

  • Sample

    240710-z4f3cszgrm

  • MD5

    36697b1e5d1bc64c5dbc4fcfa7f4ef46

  • SHA1

    f99789e8bb56c9bd9e75f67df1b19021e3021235

  • SHA256

    f57db4aa4cb5c762780e95d21df618f6350233a93d3bf9cf698acfd51bdefab5

  • SHA512

    6e4dfcc685a6b0c45e7761c5a5f2877ee8a7eb41851c4643f76b0bedf98bd97cc6ef88c9d09e0dfa299da987b4146a6f28b999e97248e0d9cf073276a1c73606

  • SSDEEP

    768:PW4wnebidH4vu0XXLDPinBXi3dX5hl+YW2otlAG8/W6vdlRss8QF6ynNDmwFwGoA:BbDm0XXHanBXi3dX5hMEot2H1fbF

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      36697b1e5d1bc64c5dbc4fcfa7f4ef46_JaffaCakes118

    • Size

      88KB

    • MD5

      36697b1e5d1bc64c5dbc4fcfa7f4ef46

    • SHA1

      f99789e8bb56c9bd9e75f67df1b19021e3021235

    • SHA256

      f57db4aa4cb5c762780e95d21df618f6350233a93d3bf9cf698acfd51bdefab5

    • SHA512

      6e4dfcc685a6b0c45e7761c5a5f2877ee8a7eb41851c4643f76b0bedf98bd97cc6ef88c9d09e0dfa299da987b4146a6f28b999e97248e0d9cf073276a1c73606

    • SSDEEP

      768:PW4wnebidH4vu0XXLDPinBXi3dX5hl+YW2otlAG8/W6vdlRss8QF6ynNDmwFwGoA:BbDm0XXHanBXi3dX5hMEot2H1fbF

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables cmd.exe use via registry modification

      evasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks