Overview

overview

10

Static

static

3

8d1aed78e8...18.exe

windows7-x64

10

8d1aed78e8...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8d1aed78e8e8d38c2b85d16985a71b09_JaffaCakes118

  • Size

    72KB

  • Sample

    240812-dvtffaxclg

  • MD5

    8d1aed78e8e8d38c2b85d16985a71b09

  • SHA1

    0588ff2a8faa9378fe08d6712366c90cd3067d43

  • SHA256

    f3f08ed38a5a288b8508a215e3491f3f2df8eb341e513757402b232d85c3ea5f

  • SHA512

    e18bb4741844a435c417ce9f066c1d818dd58166ff6e8d4a8d2fe4a9d8c71975418962abe2e2541360656270535b9f5379fb86931c82ce87e62ef6d33862f355

  • SSDEEP

    384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2z:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrf

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      8d1aed78e8e8d38c2b85d16985a71b09_JaffaCakes118

    • Size

      72KB

    • MD5

      8d1aed78e8e8d38c2b85d16985a71b09

    • SHA1

      0588ff2a8faa9378fe08d6712366c90cd3067d43

    • SHA256

      f3f08ed38a5a288b8508a215e3491f3f2df8eb341e513757402b232d85c3ea5f

    • SHA512

      e18bb4741844a435c417ce9f066c1d818dd58166ff6e8d4a8d2fe4a9d8c71975418962abe2e2541360656270535b9f5379fb86931c82ce87e62ef6d33862f355

    • SSDEEP

      384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2z:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrf

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks