Overview

overview

10

Static

static

3

81c34bfa0a...18.dll

windows7-x64

10

81c34bfa0a...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81c34bfa0ad3bf08b21f1b6439e3140e_JaffaCakes118

  • Size

    236KB

  • Sample

    240801-zrwx2sweml

  • MD5

    81c34bfa0ad3bf08b21f1b6439e3140e

  • SHA1

    5ef1dc200a300682f7cbb0988382eec696241722

  • SHA256

    cbb728de88e15e1098219c6e0e3c59c2abeef680d500f906f8a33d7a7bb5b0e8

  • SHA512

    361732c30e00b3ce6d9492b1227ac34a242b82ab9a57ad5bd35180be372ffd427a552bfd2c18bb08d03c83d069a1a923bc9f6d5b37f3b032dce0b5a6f2213031

  • SSDEEP

    3072:3F24fliN+7XlmZKxbLYH1rhAwHL5K2W5QVgxwkF4:3F24flic7X8ZibLYHFhAkKZYgn4

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      81c34bfa0ad3bf08b21f1b6439e3140e_JaffaCakes118

    • Size

      236KB

    • MD5

      81c34bfa0ad3bf08b21f1b6439e3140e

    • SHA1

      5ef1dc200a300682f7cbb0988382eec696241722

    • SHA256

      cbb728de88e15e1098219c6e0e3c59c2abeef680d500f906f8a33d7a7bb5b0e8

    • SHA512

      361732c30e00b3ce6d9492b1227ac34a242b82ab9a57ad5bd35180be372ffd427a552bfd2c18bb08d03c83d069a1a923bc9f6d5b37f3b032dce0b5a6f2213031

    • SSDEEP

      3072:3F24fliN+7XlmZKxbLYH1rhAwHL5K2W5QVgxwkF4:3F24flic7X8ZibLYHFhAkKZYgn4

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks