Overview

overview

8

Static

static

3

4b331fa788...18.exe

windows7-x64

3

4b331fa788...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4b331fa788e38d8a9163657f7c929e8f_JaffaCakes118

  • Size

    49KB

  • Sample

    240715-ythb1axalr

  • MD5

    4b331fa788e38d8a9163657f7c929e8f

  • SHA1

    aede908123c4ad838a89f59ff8af9f6cc36b2fe9

  • SHA256

    d1a67824dd5114b5e83c8433397bc9f82b12445d9b9f964df3fd8d975522499e

  • SHA512

    0c6e0260ba9ae45b1cd0c49f2bf81388dc8919a7f5e6e346d4c3391cb055801f1ad974c1026395a262ddcc0ecf8004592eab51a11f06a9f157da74dfa692f9f4

  • SSDEEP

    1536:vnEkah9FisULYtapaO4IWzLhhHRCRuT/IdYd:vEr1ULYWaOQL/H4Qzd

Score
8/10
persistence

Malware Config

Targets

    • Target

      4b331fa788e38d8a9163657f7c929e8f_JaffaCakes118

    • Size

      49KB

    • MD5

      4b331fa788e38d8a9163657f7c929e8f

    • SHA1

      aede908123c4ad838a89f59ff8af9f6cc36b2fe9

    • SHA256

      d1a67824dd5114b5e83c8433397bc9f82b12445d9b9f964df3fd8d975522499e

    • SHA512

      0c6e0260ba9ae45b1cd0c49f2bf81388dc8919a7f5e6e346d4c3391cb055801f1ad974c1026395a262ddcc0ecf8004592eab51a11f06a9f157da74dfa692f9f4

    • SSDEEP

      1536:vnEkah9FisULYtapaO4IWzLhhHRCRuT/IdYd:vEr1ULYWaOQL/H4Qzd

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks