Overview

overview

10

Static

static

3

a28a0fc465...18.exe

windows7-x64

10

a28a0fc465...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a28a0fc4655436927ca883dcc4d1b250_JaffaCakes118

  • Size

    3.1MB

  • Sample

    240817-pqanbavhmc

  • MD5

    a28a0fc4655436927ca883dcc4d1b250

  • SHA1

    c232ccdac10e0ca4ac8d4ff3228220e8ae25c559

  • SHA256

    f0c9edd9b876e8055bb5c34c6faf1ba6fcf08601b056903a5d686b1bcf360b88

  • SHA512

    46384dbfba83f3652b476a82e7729766eb1e5ce279af1ca84023ac4406c0c771f72704bc3074fbd62ec10ce544fecd4fdef622d5579dd62195cbe3abbc2de66a

  • SSDEEP

    98304:ilvW1UUBUvjH95yLX+g7ONofBR6M6LtQOnatWBwGuO4:+9UuZ5ylOi6BQOa8BTuO

Score
10/10
discoveryevasionexecutionpersistence

Malware Config

Targets

    • Target

      a28a0fc4655436927ca883dcc4d1b250_JaffaCakes118

    • Size

      3.1MB

    • MD5

      a28a0fc4655436927ca883dcc4d1b250

    • SHA1

      c232ccdac10e0ca4ac8d4ff3228220e8ae25c559

    • SHA256

      f0c9edd9b876e8055bb5c34c6faf1ba6fcf08601b056903a5d686b1bcf360b88

    • SHA512

      46384dbfba83f3652b476a82e7729766eb1e5ce279af1ca84023ac4406c0c771f72704bc3074fbd62ec10ce544fecd4fdef622d5579dd62195cbe3abbc2de66a

    • SSDEEP

      98304:ilvW1UUBUvjH95yLX+g7ONofBR6M6LtQOnatWBwGuO4:+9UuZ5ylOi6BQOa8BTuO

    Score
    10/10
    discoveryevasionexecutionpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

System Services

2
T1569

Service Execution

2
T1569.002

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Create or Modify System Process

2
T1543

Windows Service

2
T1543.003

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Create or Modify System Process

2
T1543

Windows Service

2
T1543.003

Scheduled Task/Job

1
T1053

Scheduled Task

1
T1053.005

Defense Evasion

Impair Defenses

1
T1562

Modify Registry

2
T1112

Credential Access

Discovery

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Service Stop

2
T1489

Tasks