Overview

overview

10

Static

static

10

0047815c16...18.exe

windows7-x64

10

0047815c16...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0047815c16d9e79d862ed8f4a60c1e46_JaffaCakes118

  • Size

    812KB

  • Sample

    240727-y58nbswcrr

  • MD5

    0047815c16d9e79d862ed8f4a60c1e46

  • SHA1

    024c2b0c90ef3c2814314c8d166ebf56548a6a46

  • SHA256

    f26e0370049f8dda2d30d4886fbfff887fde8101a634be465c715e303c66fa86

  • SHA512

    4c4f8d11862781d565a8968066159bed59c129cc772c90e63f1fed133263cf49b214aaf01b6732bb62fc8767166c3f7a81e749a7dac742a929522f7888fe3cb9

  • SSDEEP

    12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOzvHXC3X+pd167QhEQO7:hxY3NtGUmJr+4Obxd+tPZSZzviE6EhE7

Score
10/10
fakeavdiscoveryfakeavpersistencespyware

Malware Config

Targets

    • Target

      0047815c16d9e79d862ed8f4a60c1e46_JaffaCakes118

    • Size

      812KB

    • MD5

      0047815c16d9e79d862ed8f4a60c1e46

    • SHA1

      024c2b0c90ef3c2814314c8d166ebf56548a6a46

    • SHA256

      f26e0370049f8dda2d30d4886fbfff887fde8101a634be465c715e303c66fa86

    • SHA512

      4c4f8d11862781d565a8968066159bed59c129cc772c90e63f1fed133263cf49b214aaf01b6732bb62fc8767166c3f7a81e749a7dac742a929522f7888fe3cb9

    • SSDEEP

      12288:yoxejOONAM7GUC1Jr+4o628gx2Jw+tP3Jzm8JOzvHXC3X+pd167QhEQO7:hxY3NtGUmJr+4Obxd+tPZSZzviE6EhE7

    Score
    10/10
    fakeavdiscoveryfakeavpersistencespyware

    • FakeAV, RogueAntivirus

      FakeAV or Rogue AntiVirus is a class of malware that displays false alert messages.

      fakeavspywarefakeav

    • FakeAV payload

      fakeavspyware

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks