Overview

overview

8

Static

static

3

784b2d6d0a...18.exe

windows7-x64

8

784b2d6d0a...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    784b2d6d0aa73cf77d63c4e4c53f18bc_JaffaCakes118

  • Size

    18.9MB

  • Sample

    240727-qext5stgkd

  • MD5

    784b2d6d0aa73cf77d63c4e4c53f18bc

  • SHA1

    870e98f35f6f0fa2eb06ad80b4d3a58673f4898a

  • SHA256

    92bd5bcbd1db0ace4bbfa1d0baa881a340886aea8a0575d868403dc726188f47

  • SHA512

    3dd0fdf109db516d0ce9590b879cf49d20843f9c1c6e608806642999c989421f22f610d202fc73461028a3d30142cd08d28e10097b57cc53383a1dc11c5f6fd5

  • SSDEEP

    98304:28haS9aLJKtrdaA6jywuCLoAm3g8HpD5gbAdhVgVqAoXU4/:2lS0NKtrdaAI/8Hp9dhO2/

Score
8/10
discoveryevasionexecutionpersistence

Malware Config

Targets

    • Target

      784b2d6d0aa73cf77d63c4e4c53f18bc_JaffaCakes118

    • Size

      18.9MB

    • MD5

      784b2d6d0aa73cf77d63c4e4c53f18bc

    • SHA1

      870e98f35f6f0fa2eb06ad80b4d3a58673f4898a

    • SHA256

      92bd5bcbd1db0ace4bbfa1d0baa881a340886aea8a0575d868403dc726188f47

    • SHA512

      3dd0fdf109db516d0ce9590b879cf49d20843f9c1c6e608806642999c989421f22f610d202fc73461028a3d30142cd08d28e10097b57cc53383a1dc11c5f6fd5

    • SSDEEP

      98304:28haS9aLJKtrdaA6jywuCLoAm3g8HpD5gbAdhVgVqAoXU4/:2lS0NKtrdaAI/8Hp9dhO2/

    Score
    8/10
    discoveryevasionexecutionpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

System Services

1
T1569

Service Execution

1
T1569.002

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Create or Modify System Process

1
T1543

Windows Service

1
T1543.003

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Defense Evasion

Impair Defenses

1
T1562

Modify Registry

2
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

1
T1489

Tasks