Overview

overview

10

Static

static

3

5d16231a4f...18.exe

windows7-x64

10

5d16231a4f...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d16231a4f293b24456e7efd6136ddf9_JaffaCakes118

  • Size

    382KB

  • Sample

    240719-wsvjtstcmn

  • MD5

    5d16231a4f293b24456e7efd6136ddf9

  • SHA1

    8665c5f56fb7beaa90e6d7d655abc7550b4013a3

  • SHA256

    08eda86a5fc8ecf563d1f42dc84d4aac0a356ae2068febd87d66454639a8cbd0

  • SHA512

    eb261043a2d3420aae8d83af0a1a84047429b092207a3f28de613b1fc8d46278bee45a917eb99aef4b39bd56a633538dd8c92c3026aed0e349ebf4d3318ec3be

  • SSDEEP

    6144:KePaoj6mzxv0qAqfbyxDkN7YYbAeAbkZwTagAq3l0+wmDGgC:Ke5j7zN0qAqGxGdoQZwTaFOGH

Score
10/10
evasion

Malware Config

Targets

    • Target

      5d16231a4f293b24456e7efd6136ddf9_JaffaCakes118

    • Size

      382KB

    • MD5

      5d16231a4f293b24456e7efd6136ddf9

    • SHA1

      8665c5f56fb7beaa90e6d7d655abc7550b4013a3

    • SHA256

      08eda86a5fc8ecf563d1f42dc84d4aac0a356ae2068febd87d66454639a8cbd0

    • SHA512

      eb261043a2d3420aae8d83af0a1a84047429b092207a3f28de613b1fc8d46278bee45a917eb99aef4b39bd56a633538dd8c92c3026aed0e349ebf4d3318ec3be

    • SSDEEP

      6144:KePaoj6mzxv0qAqfbyxDkN7YYbAeAbkZwTagAq3l0+wmDGgC:Ke5j7zN0qAqGxGdoQZwTaFOGH

    Score
    10/10
    evasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks