Overview

overview

7

Static

static

3

d1981134d8...18.exe

windows7-x64

d1981134d8...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d1981134d801a385e5437bdc2b6e92bb_JaffaCakes118

  • Size

    84KB

  • Sample

    240907-k9jm4swflr

  • MD5

    d1981134d801a385e5437bdc2b6e92bb

  • SHA1

    c65c71ae4739a499d518fec37edbd3217f23436e

  • SHA256

    4bd2caa17888039df48e2368cf0e03accab800c9b7f5a45ccd79be2a9ef1c11f

  • SHA512

    52510212d83454f8677e852cfd230088ac4988025da73ae4e66956a94a4429a2fa8b921e091e232b02e300ee5f9c091e27aa20b8bd4493ec91f09253cba10d11

  • SSDEEP

    1536:qY6Trr9+GIrAdf0RBBoxE0dyTdKq/bIT+5wOpXKv0tY1cH6C8PwHStGe5ZEY:qBrErAx0jBIEFT8q/bIUjXKtOHL8IYFp

Score
7/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      d1981134d801a385e5437bdc2b6e92bb_JaffaCakes118

    • Size

      84KB

    • MD5

      d1981134d801a385e5437bdc2b6e92bb

    • SHA1

      c65c71ae4739a499d518fec37edbd3217f23436e

    • SHA256

      4bd2caa17888039df48e2368cf0e03accab800c9b7f5a45ccd79be2a9ef1c11f

    • SHA512

      52510212d83454f8677e852cfd230088ac4988025da73ae4e66956a94a4429a2fa8b921e091e232b02e300ee5f9c091e27aa20b8bd4493ec91f09253cba10d11

    • SSDEEP

      1536:qY6Trr9+GIrAdf0RBBoxE0dyTdKq/bIT+5wOpXKv0tY1cH6C8PwHStGe5ZEY:qBrErAx0jBIEFT8q/bIUjXKtOHL8IYFp

    Score
    7/10
    defense_evasiondiscoverypersistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks