Overview

overview

8

Static

static

3

77d1ba6a99...18.exe

windows7-x64

8

77d1ba6a99...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    77d1ba6a99d6c15c5d800ec2cf07bef7_JaffaCakes118

  • Size

    367KB

  • Sample

    240727-mbdqbawgjh

  • MD5

    77d1ba6a99d6c15c5d800ec2cf07bef7

  • SHA1

    8b5e8b4f624aba2f4198cc4cf19329502f9704e0

  • SHA256

    4cc806e56d20cde9dcad41547152d34032cdd146fe46f0728ea6ef3a40b83db2

  • SHA512

    69fc64a68833e2968aaf036667873cb630f182a5f18f098846145baa105935e9b329972811f48ba6144cce215c3552b3134d8aad44e6fbd9a3404c57424f1b60

  • SSDEEP

    6144:NtKe6YiDdv3m3mgKHIl7bNIAROzTuft84FpJmWEHaMqT3TExPn69ehD8pLGXF:NtKe6Zv23YdAPF84FpJmCMqLIR0e/

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      77d1ba6a99d6c15c5d800ec2cf07bef7_JaffaCakes118

    • Size

      367KB

    • MD5

      77d1ba6a99d6c15c5d800ec2cf07bef7

    • SHA1

      8b5e8b4f624aba2f4198cc4cf19329502f9704e0

    • SHA256

      4cc806e56d20cde9dcad41547152d34032cdd146fe46f0728ea6ef3a40b83db2

    • SHA512

      69fc64a68833e2968aaf036667873cb630f182a5f18f098846145baa105935e9b329972811f48ba6144cce215c3552b3134d8aad44e6fbd9a3404c57424f1b60

    • SSDEEP

      6144:NtKe6YiDdv3m3mgKHIl7bNIAROzTuft84FpJmWEHaMqT3TExPn69ehD8pLGXF:NtKe6Zv23YdAPF84FpJmCMqLIR0e/

    Score
    8/10
    discoverypersistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks