Overview

overview

10

Static

static

3

a4e3efd3ea...18.exe

windows7-x64

10

a4e3efd3ea...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a4e3efd3eab9b816b4e39068fb015b0b_JaffaCakes118

  • Size

    72KB

  • Sample

    240818-b3ntta1ern

  • MD5

    a4e3efd3eab9b816b4e39068fb015b0b

  • SHA1

    273a8ad18bbdacc1f94765e0c3f4c76d6e9279a6

  • SHA256

    490c82470bae79400b242a40afdd27ecd9ee190f79bf4c4cea9514dd61a595af

  • SHA512

    71cd7bb05e1ff39c4cc57ab1522c8b31ecc1c05c5c3f063112f9052a18ca3740a8d3c8cb0dacc074feaaae91e5e7bcd065bb95944976e7f8f6efa89fbd480ad9

  • SSDEEP

    384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2t:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrh

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      a4e3efd3eab9b816b4e39068fb015b0b_JaffaCakes118

    • Size

      72KB

    • MD5

      a4e3efd3eab9b816b4e39068fb015b0b

    • SHA1

      273a8ad18bbdacc1f94765e0c3f4c76d6e9279a6

    • SHA256

      490c82470bae79400b242a40afdd27ecd9ee190f79bf4c4cea9514dd61a595af

    • SHA512

      71cd7bb05e1ff39c4cc57ab1522c8b31ecc1c05c5c3f063112f9052a18ca3740a8d3c8cb0dacc074feaaae91e5e7bcd065bb95944976e7f8f6efa89fbd480ad9

    • SSDEEP

      384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2t:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrh

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks