Overview

overview

8

Static

static

3

af1204fa34...18.exe

windows7-x64

8

af1204fa34...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    af1204fa3456697625952fdb47b33a32_JaffaCakes118

  • Size

    150KB

  • Sample

    240820-nsdmbatcrp

  • MD5

    af1204fa3456697625952fdb47b33a32

  • SHA1

    647264df416e364775bd3a667aa6d728f455c527

  • SHA256

    d6a8d42078206d46cc5ff46074c9ba9e0bc9872e01ab0ba4abb98f63ea4a6566

  • SHA512

    2863a7ffa2814fe7a2c5a55f2fd776cf094f7f3532884aee673e7bd36a82fb3c2b7754695526d17725b0a40f10d2861c6e0cb7d552cf6d1d88685b126c5e1e60

  • SSDEEP

    3072:MRAhhcsxgAJuK7bZD01GoI0ONCTf29ccbz3QT5Egz7ouCfOdpV:MRAhhJxX7bNINTf4cC05EVfQpV

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      af1204fa3456697625952fdb47b33a32_JaffaCakes118

    • Size

      150KB

    • MD5

      af1204fa3456697625952fdb47b33a32

    • SHA1

      647264df416e364775bd3a667aa6d728f455c527

    • SHA256

      d6a8d42078206d46cc5ff46074c9ba9e0bc9872e01ab0ba4abb98f63ea4a6566

    • SHA512

      2863a7ffa2814fe7a2c5a55f2fd776cf094f7f3532884aee673e7bd36a82fb3c2b7754695526d17725b0a40f10d2861c6e0cb7d552cf6d1d88685b126c5e1e60

    • SSDEEP

      3072:MRAhhcsxgAJuK7bZD01GoI0ONCTf29ccbz3QT5Egz7ouCfOdpV:MRAhhJxX7bNINTf4cC05EVfQpV

    Score
    8/10
    discoverypersistence

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Executes dropped EXE

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks