Overview

overview

7

Static

static

1

b152d7b293...18.exe

windows7-x64

7

b152d7b293...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b152d7b2933b5005e54c7800e21e6b51_JaffaCakes118

  • Size

    362KB

  • Sample

    240820-3rfgvatbjp

  • MD5

    b152d7b2933b5005e54c7800e21e6b51

  • SHA1

    56b641a15bc654a5a6c9f86c98793a50708a3619

  • SHA256

    b101ef477d44db43d9fbefe01450ae7b4e5ce6408f126c2bba3db6737cb081b2

  • SHA512

    b45a2325c729d2276b0fd52e301f20f6fee3e0478c9267bdc44382029621a2b9375264635439519757ae7b47cf27ffcaafefa7f81961ddca159199a5f56600e3

  • SSDEEP

    6144:X6OnEyX6AlqGkfSOBlWWRmGwL4QQgKKX8x7/2xWqWma2XDzHPt281B6zk:rnzX66hpOjWtGNgDUiWqWNKDrt2Q6zk

Score
7/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      b152d7b2933b5005e54c7800e21e6b51_JaffaCakes118

    • Size

      362KB

    • MD5

      b152d7b2933b5005e54c7800e21e6b51

    • SHA1

      56b641a15bc654a5a6c9f86c98793a50708a3619

    • SHA256

      b101ef477d44db43d9fbefe01450ae7b4e5ce6408f126c2bba3db6737cb081b2

    • SHA512

      b45a2325c729d2276b0fd52e301f20f6fee3e0478c9267bdc44382029621a2b9375264635439519757ae7b47cf27ffcaafefa7f81961ddca159199a5f56600e3

    • SSDEEP

      6144:X6OnEyX6AlqGkfSOBlWWRmGwL4QQgKKX8x7/2xWqWma2XDzHPt281B6zk:rnzX66hpOjWtGNgDUiWqWNKDrt2Q6zk

    Score
    7/10
    defense_evasiondiscovery

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks