Overview

overview

10

Static

static

3

c97bff52fb...18.exe

windows7-x64

10

c97bff52fb...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    c97bff52fb0b265ee268fdb318bd9fab_JaffaCakes118

  • Size

    54KB

  • Sample

    240829-x76fbaxdph

  • MD5

    c97bff52fb0b265ee268fdb318bd9fab

  • SHA1

    bd0b36667258429fb2e921a2b0247870a84ffd24

  • SHA256

    0e45870f3f60f1fc8b2c2ed05a3d104488e5c479f45779e1a2eb11073d5980da

  • SHA512

    e0e065ee5262b11ea39933def76b9dd4a0069a214dcaf45ba7c372be8b412bb81eab523c356aba55873f33f43649a706833d5a88b67595c5c747bf7d198ac923

  • SSDEEP

    768:rWCsFcX23AUFqsPkNXOcDXMo7iqbPg+vBkOBsCG3gekg+/LKqiCrzT4YmPut2BtH:qcX23u4s7JWOWx3gJprzhmP5jtUQs

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      c97bff52fb0b265ee268fdb318bd9fab_JaffaCakes118

    • Size

      54KB

    • MD5

      c97bff52fb0b265ee268fdb318bd9fab

    • SHA1

      bd0b36667258429fb2e921a2b0247870a84ffd24

    • SHA256

      0e45870f3f60f1fc8b2c2ed05a3d104488e5c479f45779e1a2eb11073d5980da

    • SHA512

      e0e065ee5262b11ea39933def76b9dd4a0069a214dcaf45ba7c372be8b412bb81eab523c356aba55873f33f43649a706833d5a88b67595c5c747bf7d198ac923

    • SSDEEP

      768:rWCsFcX23AUFqsPkNXOcDXMo7iqbPg+vBkOBsCG3gekg+/LKqiCrzT4YmPut2BtH:qcX23u4s7JWOWx3gJprzhmP5jtUQs

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Disables use of System Restore points

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks