Overview

overview

10

Static

static

3

42c93b9225...18.exe

windows7-x64

10

42c93b9225...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    42c93b9225f8bfa837f3486d73473f4e_JaffaCakes118

  • Size

    152KB

  • Sample

    240713-wstbrs1gmp

  • MD5

    42c93b9225f8bfa837f3486d73473f4e

  • SHA1

    8fdbfc3de0645c56019161acd7344fb806617cb8

  • SHA256

    8813f2fd4b750122cea6efce878134a585ffc3762ef8ec149e928db20693cf4b

  • SHA512

    7b2b39e50d4ee5a56e5395f0209238c3a687fdc1f8fcc6c35c0399396e9fb5ccb987b2d9bca24d6ff5caeec3f19e5bbbb5b9c39b0185e45076b2b4d8b82b5a29

  • SSDEEP

    3072:tHgsJcNnAwgSDLhsfls7HiwO+8bjCL1mFg+r3fC+g:tHgbRfDLssDZO+SjChmN3fC+g

Score
10/10
evasion

Malware Config

Targets

    • Target

      42c93b9225f8bfa837f3486d73473f4e_JaffaCakes118

    • Size

      152KB

    • MD5

      42c93b9225f8bfa837f3486d73473f4e

    • SHA1

      8fdbfc3de0645c56019161acd7344fb806617cb8

    • SHA256

      8813f2fd4b750122cea6efce878134a585ffc3762ef8ec149e928db20693cf4b

    • SHA512

      7b2b39e50d4ee5a56e5395f0209238c3a687fdc1f8fcc6c35c0399396e9fb5ccb987b2d9bca24d6ff5caeec3f19e5bbbb5b9c39b0185e45076b2b4d8b82b5a29

    • SSDEEP

      3072:tHgsJcNnAwgSDLhsfls7HiwO+8bjCL1mFg+r3fC+g:tHgbRfDLssDZO+SjChmN3fC+g

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks