Overview

overview

6

Static

static

3

d454540184...18.exe

windows7-x64

6

d454540184...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d454540184a869aa02127f900630fc63_JaffaCakes118

  • Size

    630KB

  • Sample

    240908-pcq35svfnp

  • MD5

    d454540184a869aa02127f900630fc63

  • SHA1

    4ac825fa9d93b514976035b12db84ecb2e7b3215

  • SHA256

    6bf3a49bd18f8ce7489951b8aa37fff5bc3651aeda1548ff382204976ef1d1d4

  • SHA512

    907929921efa1c09d4761e371096353fe8274c78305dd8724e56a073259b5c17563de230515d27b2dbd96ee62610c71cd9d329fb43eeea3962e17d70c4fe0d99

  • SSDEEP

    12288:Zu8oO2W1v2hk1XpzGlkSGAOPpptKeQPaMVySkIxBiFx+5Il2D:qOrusKaPpUPa9SFriFxu+2D

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      d454540184a869aa02127f900630fc63_JaffaCakes118

    • Size

      630KB

    • MD5

      d454540184a869aa02127f900630fc63

    • SHA1

      4ac825fa9d93b514976035b12db84ecb2e7b3215

    • SHA256

      6bf3a49bd18f8ce7489951b8aa37fff5bc3651aeda1548ff382204976ef1d1d4

    • SHA512

      907929921efa1c09d4761e371096353fe8274c78305dd8724e56a073259b5c17563de230515d27b2dbd96ee62610c71cd9d329fb43eeea3962e17d70c4fe0d99

    • SSDEEP

      12288:Zu8oO2W1v2hk1XpzGlkSGAOPpptKeQPaMVySkIxBiFx+5Il2D:qOrusKaPpUPa9SFriFxu+2D

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks