Overview

overview

10

Static

static

3

9586c32fe3...18.exe

windows7-x64

10

9586c32fe3...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9586c32fe33b206b8c2581a866aab907_JaffaCakes118

  • Size

    260KB

  • Sample

    240814-lh895avdlh

  • MD5

    9586c32fe33b206b8c2581a866aab907

  • SHA1

    43df59353cdf933293eac9c938edea40c0d93ac6

  • SHA256

    c2af5b117cc3c807c48a2fb45120901ab89b7bdb82b0882065aa12656ef5c638

  • SHA512

    227d1fd215ed496067daf264dbdc410330da8be527ebd089ee3a9c2742f49694b7e1e6409a129876e1a32e3dc20b40b0d82a3c209774a905537786a04bead416

  • SSDEEP

    6144:Ulw1vZKBR9qBgFJc5GkNLbqDBFqWZFKkFFJc5QBR9qBzw1vZk:UlMkQBmJc5pNbaUebLJc50QBzMa

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      9586c32fe33b206b8c2581a866aab907_JaffaCakes118

    • Size

      260KB

    • MD5

      9586c32fe33b206b8c2581a866aab907

    • SHA1

      43df59353cdf933293eac9c938edea40c0d93ac6

    • SHA256

      c2af5b117cc3c807c48a2fb45120901ab89b7bdb82b0882065aa12656ef5c638

    • SHA512

      227d1fd215ed496067daf264dbdc410330da8be527ebd089ee3a9c2742f49694b7e1e6409a129876e1a32e3dc20b40b0d82a3c209774a905537786a04bead416

    • SSDEEP

      6144:Ulw1vZKBR9qBgFJc5GkNLbqDBFqWZFKkFFJc5QBR9qBzw1vZk:UlMkQBmJc5pNbaUebLJc50QBzMa

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks