Overview

overview

10

Static

static

3

85d594d4c9...18.exe

windows7-x64

10

85d594d4c9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    85d594d4c9a41f779f697320cc3f4228_JaffaCakes118

  • Size

    72KB

  • Sample

    240810-naszaa1brg

  • MD5

    85d594d4c9a41f779f697320cc3f4228

  • SHA1

    8ae2b0c58179700a1d1185eb76a1571825c82cec

  • SHA256

    df99b869e56e6fffc5bd548da736783bce75c3b669a14437431587a535df9b29

  • SHA512

    edb59ab9d59f49803d196ec44b134cb17222ce0a812277b158cdc3acb8c22312fc4cc3f86a1aa254af3518936f4bd9c134aa1f1f15c4fbaa4add0c0f58018ccc

  • SSDEEP

    768:NpQNwC3BESe4Vqth+0V5vKlE3BEJwRrTd3FAyvUp:HeT7BVwxfvqguKRFAbp

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      85d594d4c9a41f779f697320cc3f4228_JaffaCakes118

    • Size

      72KB

    • MD5

      85d594d4c9a41f779f697320cc3f4228

    • SHA1

      8ae2b0c58179700a1d1185eb76a1571825c82cec

    • SHA256

      df99b869e56e6fffc5bd548da736783bce75c3b669a14437431587a535df9b29

    • SHA512

      edb59ab9d59f49803d196ec44b134cb17222ce0a812277b158cdc3acb8c22312fc4cc3f86a1aa254af3518936f4bd9c134aa1f1f15c4fbaa4add0c0f58018ccc

    • SSDEEP

      768:NpQNwC3BESe4Vqth+0V5vKlE3BEJwRrTd3FAyvUp:HeT7BVwxfvqguKRFAbp

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks