Overview

overview

10

Static

static

3

d28ffb000e...18.dll

windows7-x64

10

d28ffb000e...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d28ffb000e6a1a89389519246532de90_JaffaCakes118

  • Size

    236KB

  • Sample

    240907-wzgljszdpc

  • MD5

    d28ffb000e6a1a89389519246532de90

  • SHA1

    f52d701dcf7c209a7cf4adc93aef0098c61ee501

  • SHA256

    22fd0ede98173a34cc907e62d61595d97134b1edb787f0482e1a50d742601da0

  • SHA512

    9819be441d9de875a46a61436cb71a6e78f5230a972a6f49a2ef4175f8571424261fe78aa51144ffef754f24b9e25ce21de8ca0ae97315336002502a373f5c51

  • SSDEEP

    3072:3F24fliN+7XlmZKxbLYH1rhAwHL5K2W5QVgxwkFH:3F24flic7X8ZibLYHFhAkKZYgnH

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      d28ffb000e6a1a89389519246532de90_JaffaCakes118

    • Size

      236KB

    • MD5

      d28ffb000e6a1a89389519246532de90

    • SHA1

      f52d701dcf7c209a7cf4adc93aef0098c61ee501

    • SHA256

      22fd0ede98173a34cc907e62d61595d97134b1edb787f0482e1a50d742601da0

    • SHA512

      9819be441d9de875a46a61436cb71a6e78f5230a972a6f49a2ef4175f8571424261fe78aa51144ffef754f24b9e25ce21de8ca0ae97315336002502a373f5c51

    • SSDEEP

      3072:3F24fliN+7XlmZKxbLYH1rhAwHL5K2W5QVgxwkFH:3F24flic7X8ZibLYHFhAkKZYgnH

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks