Overview

overview

10

Static

static

10

db8147c277...18.msi

windows7-x64

6

db8147c277...18.msi

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db8147c277df25be04918bb25776d9b3_JaffaCakes118

  • Size

    384KB

  • Sample

    240912-ax68jasblh

  • MD5

    db8147c277df25be04918bb25776d9b3

  • SHA1

    5786894210952d0e3f46bada4d068fede586ab7a

  • SHA256

    92dc93d00d23934b3ca24ed19ba79d4be9eb2012658b41ed32570a2bb1d86ad8

  • SHA512

    dfbf4d62fd6595132839de9beefc3bbe737fa789d4d4593b528ae3ecb48b0c06d74a86a96a86887e4b734370ba3b2c0822a0cbce79a69d6c369beb517cf3c2cd

  • SSDEEP

    6144:BbZjgS007NNMX/+DoklCAFNWClCA+jp02GmaZ/ZJSEPavLFjt+WN:BbZNNNzbCClCA+jp02GmWhJnav5jUk

Score
10/10
rattypersistenceprivilege_escalation

Malware Config

Targets

    • Target

      db8147c277df25be04918bb25776d9b3_JaffaCakes118

    • Size

      384KB

    • MD5

      db8147c277df25be04918bb25776d9b3

    • SHA1

      5786894210952d0e3f46bada4d068fede586ab7a

    • SHA256

      92dc93d00d23934b3ca24ed19ba79d4be9eb2012658b41ed32570a2bb1d86ad8

    • SHA512

      dfbf4d62fd6595132839de9beefc3bbe737fa789d4d4593b528ae3ecb48b0c06d74a86a96a86887e4b734370ba3b2c0822a0cbce79a69d6c369beb517cf3c2cd

    • SSDEEP

      6144:BbZjgS007NNMX/+DoklCAFNWClCA+jp02GmaZ/ZJSEPavLFjt+WN:BbZNNNzbCClCA+jp02GmWhJnav5jUk

    Score
    6/10
    persistenceprivilege_escalation

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks