Overview

overview

10

Static

static

3

a2e25b8f94...18.exe

windows7-x64

10

a2e25b8f94...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a2e25b8f94d019c84f0d54314338bdb5_JaffaCakes118

  • Size

    133KB

  • Sample

    240817-rn7ldazeld

  • MD5

    a2e25b8f94d019c84f0d54314338bdb5

  • SHA1

    f4c476921aa6452e71ac1d886a5c3754620302e9

  • SHA256

    291250fb9cbfb7a390b0f6917330062e523443a4c5985bbea12a9d3dd720ea69

  • SHA512

    6537da27ef81ae3395706bd716865d73b2158db67306653f5625d0ab588a317df296c948aebfe5512dde6cd82e4b1169786986bc92f69f78f48f70ec182f22a4

  • SSDEEP

    3072:kUGTaiwM7tFOiWgU9oiZthCg+A713/NPvZWAu6+NBYG:kp+51vNPhWAu6+NF

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      a2e25b8f94d019c84f0d54314338bdb5_JaffaCakes118

    • Size

      133KB

    • MD5

      a2e25b8f94d019c84f0d54314338bdb5

    • SHA1

      f4c476921aa6452e71ac1d886a5c3754620302e9

    • SHA256

      291250fb9cbfb7a390b0f6917330062e523443a4c5985bbea12a9d3dd720ea69

    • SHA512

      6537da27ef81ae3395706bd716865d73b2158db67306653f5625d0ab588a317df296c948aebfe5512dde6cd82e4b1169786986bc92f69f78f48f70ec182f22a4

    • SSDEEP

      3072:kUGTaiwM7tFOiWgU9oiZthCg+A713/NPvZWAu6+NBYG:kp+51vNPhWAu6+NF

    Score
    10/10
    discoveryevasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks