Overview

overview

8

Static

static

3

46c1af452a...18.exe

windows7-x64

8

46c1af452a...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46c1af452ab28751d496a1ef2a02e7b9_JaffaCakes118

  • Size

    5.3MB

  • Sample

    240714-vqfgfszclp

  • MD5

    46c1af452ab28751d496a1ef2a02e7b9

  • SHA1

    c989d1b1029b3d4b8cb4115f0269d44a9babedde

  • SHA256

    afaeff2c95589bda9d95a2e2af301cd5e99cdea5fa79fb5c931f9f264cbbccfc

  • SHA512

    bf3f5e4fc33211203bc13d560d747e210f5c334516a955e94cfb5291eaaeee200f8607f5810ee1f88fc852a08f7d40ec285f56796245797e93ca9034e7cc6dd0

  • SSDEEP

    98304:wDQcg1XGTOq/pDi2mgJtNI3ykcKKpvIl8jb+S2bSF9kyIeROE7VO2qxuXHukvO/P:YOqxDNVUyuuv5bF2ODRvVLy/3vum2FI

Score
8/10
evasionexecutionpersistence

Malware Config

Targets

    • Target

      46c1af452ab28751d496a1ef2a02e7b9_JaffaCakes118

    • Size

      5.3MB

    • MD5

      46c1af452ab28751d496a1ef2a02e7b9

    • SHA1

      c989d1b1029b3d4b8cb4115f0269d44a9babedde

    • SHA256

      afaeff2c95589bda9d95a2e2af301cd5e99cdea5fa79fb5c931f9f264cbbccfc

    • SHA512

      bf3f5e4fc33211203bc13d560d747e210f5c334516a955e94cfb5291eaaeee200f8607f5810ee1f88fc852a08f7d40ec285f56796245797e93ca9034e7cc6dd0

    • SSDEEP

      98304:wDQcg1XGTOq/pDi2mgJtNI3ykcKKpvIl8jb+S2bSF9kyIeROE7VO2qxuXHukvO/P:YOqxDNVUyuuv5bF2ODRvVLy/3vum2FI

    Score
    8/10
    evasionexecutionpersistence

    • Stops running service(s)

      evasionexecution

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks