Overview

overview

8

Static

static

3

a336643257...18.exe

windows7-x64

8

a336643257...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a336643257fc39c124f67cf00c2f0453_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240817-tkqjssvajb

  • MD5

    a336643257fc39c124f67cf00c2f0453

  • SHA1

    720205e2c372a656c00ed8e0eacc8261609a3219

  • SHA256

    8aacf53025f9bf183b292585dd9a7269a05a7136ebe0a76caad0d93cc1bf88ba

  • SHA512

    87bd081aab37dcd7058cda3d68b93c6756a8138a34411654e1faeec2629a7adf99e538533eb3bb0642f8521aae6bc617566f6b83685c178e5b9c2a528a9be42e

  • SSDEEP

    24576:/UqGhT/QSk3QRRZLrIHZWyoM9L5UDgrKoV5EEvi4t5D:/0Rk34LLrI4+p5/XXEb4DD

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      a336643257fc39c124f67cf00c2f0453_JaffaCakes118

    • Size

      1.1MB

    • MD5

      a336643257fc39c124f67cf00c2f0453

    • SHA1

      720205e2c372a656c00ed8e0eacc8261609a3219

    • SHA256

      8aacf53025f9bf183b292585dd9a7269a05a7136ebe0a76caad0d93cc1bf88ba

    • SHA512

      87bd081aab37dcd7058cda3d68b93c6756a8138a34411654e1faeec2629a7adf99e538533eb3bb0642f8521aae6bc617566f6b83685c178e5b9c2a528a9be42e

    • SSDEEP

      24576:/UqGhT/QSk3QRRZLrIHZWyoM9L5UDgrKoV5EEvi4t5D:/0Rk34LLrI4+p5/XXEb4DD

    Score
    8/10
    discoverypersistence

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks