Overview

overview

8

Static

static

3

3c68167929...18.dll

windows7-x64

8

3c68167929...18.dll

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3c68167929b7f159ac35d48354d0ba00_JaffaCakes118

  • Size

    178KB

  • Sample

    240712-hvysdavhka

  • MD5

    3c68167929b7f159ac35d48354d0ba00

  • SHA1

    338400f321f111657373972b891ec5a16f249003

  • SHA256

    f6a0f55938b82aaf5663c0b8f5c79c2be2768fcb55f5b24f2f100d2105bbddb2

  • SHA512

    6715fd4b23b13237c5cde9bd78624f0a6a524f3d20f47da400c7a4e98845ccb17cbb516480583b141e7a5f585f182fd361ca3f0a3f4aa60b9aca4de414fc82d2

  • SSDEEP

    3072:h101sna7MYqowXVD9sVukjg7GkyOAFSTJAzoKtSxhAkR7S73Rb8sZdYeHlktkw:fjAMjXR9sVPjg7d+S9AJwG7Pl

Score
8/10
persistence

Malware Config

Targets

    • Target

      3c68167929b7f159ac35d48354d0ba00_JaffaCakes118

    • Size

      178KB

    • MD5

      3c68167929b7f159ac35d48354d0ba00

    • SHA1

      338400f321f111657373972b891ec5a16f249003

    • SHA256

      f6a0f55938b82aaf5663c0b8f5c79c2be2768fcb55f5b24f2f100d2105bbddb2

    • SHA512

      6715fd4b23b13237c5cde9bd78624f0a6a524f3d20f47da400c7a4e98845ccb17cbb516480583b141e7a5f585f182fd361ca3f0a3f4aa60b9aca4de414fc82d2

    • SSDEEP

      3072:h101sna7MYqowXVD9sVukjg7GkyOAFSTJAzoKtSxhAkR7S73Rb8sZdYeHlktkw:fjAMjXR9sVPjg7d+S9AJwG7Pl

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks