Overview

overview

8

Static

static

3

4276388b5a...18.exe

windows7-x64

8

4276388b5a...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4276388b5a1d1490efb8b96cdd0fc943_JaffaCakes118

  • Size

    14KB

  • Sample

    240713-ty711azhkd

  • MD5

    4276388b5a1d1490efb8b96cdd0fc943

  • SHA1

    9c1c2e482ccc1e72b1d58b30a76e2302f981840a

  • SHA256

    4972f450c5a3e9d0a3ec718937c0bd849065a5a5bdf900602ca001476bf093e3

  • SHA512

    4ca43fa605ffbdefd27a5f526a87401a1480c6eb084eb134d519a03c4abee7abbe0d7fe9b0ace9d71399a378e803f4f34bf7a3055af8d63ee946265242990dd1

  • SSDEEP

    384:3n64NcDDvsP+jDggg2Fj29V1pb3I8mo+QX:36ixP+jMgHAV1pb3OQ

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      4276388b5a1d1490efb8b96cdd0fc943_JaffaCakes118

    • Size

      14KB

    • MD5

      4276388b5a1d1490efb8b96cdd0fc943

    • SHA1

      9c1c2e482ccc1e72b1d58b30a76e2302f981840a

    • SHA256

      4972f450c5a3e9d0a3ec718937c0bd849065a5a5bdf900602ca001476bf093e3

    • SHA512

      4ca43fa605ffbdefd27a5f526a87401a1480c6eb084eb134d519a03c4abee7abbe0d7fe9b0ace9d71399a378e803f4f34bf7a3055af8d63ee946265242990dd1

    • SSDEEP

      384:3n64NcDDvsP+jDggg2Fj29V1pb3I8mo+QX:36ixP+jMgHAV1pb3OQ

    Score
    8/10
    discoverypersistence

    • Contacts a large (977) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks