Overview

overview

8

Static

static

3

491f74c804...18.exe

windows7-x64

8

491f74c804...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    491f74c8049ae40c9510148489f29d95_JaffaCakes118

  • Size

    203KB

  • Sample

    240715-k2he3sydjq

  • MD5

    491f74c8049ae40c9510148489f29d95

  • SHA1

    1110b111b44aa2d7fd78f2de315d3f190803a63a

  • SHA256

    a4140150f23ed40f463c8760a182b269bd32c98b297a43bdd7f0570344a8aeaa

  • SHA512

    92a972a03f9634821d51b5cdbae4558a7ba7b013557d075f6c041fcdff52bffe8ca0701a1ec3b56aeca914b0fb13fcdaf62db9a87df8f9a5f621d8416ae5a09b

  • SSDEEP

    3072:MRAhhcsxgAJuK7bZD01GoI0ON27Usy3/ROzTUF//OCxMJwVUefaGvMSiHUUt/Z:MRAhhJxX7bNIAROzTsFC2K30sh

Score
8/10
persistence

Malware Config

Targets

    • Target

      491f74c8049ae40c9510148489f29d95_JaffaCakes118

    • Size

      203KB

    • MD5

      491f74c8049ae40c9510148489f29d95

    • SHA1

      1110b111b44aa2d7fd78f2de315d3f190803a63a

    • SHA256

      a4140150f23ed40f463c8760a182b269bd32c98b297a43bdd7f0570344a8aeaa

    • SHA512

      92a972a03f9634821d51b5cdbae4558a7ba7b013557d075f6c041fcdff52bffe8ca0701a1ec3b56aeca914b0fb13fcdaf62db9a87df8f9a5f621d8416ae5a09b

    • SSDEEP

      3072:MRAhhcsxgAJuK7bZD01GoI0ON27Usy3/ROzTUF//OCxMJwVUefaGvMSiHUUt/Z:MRAhhJxX7bNIAROzTsFC2K30sh

    Score
    8/10
    persistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks