Overview

overview

10

Static

static

3

ddb220892a...18.exe

windows7-x64

10

ddb220892a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ddb220892a0fa711b697831cc2c73a16_JaffaCakes118

  • Size

    72KB

  • Sample

    240913-fbse5svdkp

  • MD5

    ddb220892a0fa711b697831cc2c73a16

  • SHA1

    091b41cdd5c09252f3b62e29d8017c9d3e8b23d5

  • SHA256

    d9b00ef9fb52251c4cb8cbccf15d2d2f7de6374db46c7c55357c2071e4c1a74f

  • SHA512

    cdb770761ba2de9eb00c32129ca6f8dd30437d47bbaf35addbad92e08b1d0c0606a3f26a62a02306f0bf41a6d8c121a112b6003f41bb2aef3257352221793b52

  • SSDEEP

    384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2k:ipQNwC3BEddsEqOt/hyJF+x3BEJwRro

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      ddb220892a0fa711b697831cc2c73a16_JaffaCakes118

    • Size

      72KB

    • MD5

      ddb220892a0fa711b697831cc2c73a16

    • SHA1

      091b41cdd5c09252f3b62e29d8017c9d3e8b23d5

    • SHA256

      d9b00ef9fb52251c4cb8cbccf15d2d2f7de6374db46c7c55357c2071e4c1a74f

    • SHA512

      cdb770761ba2de9eb00c32129ca6f8dd30437d47bbaf35addbad92e08b1d0c0606a3f26a62a02306f0bf41a6d8c121a112b6003f41bb2aef3257352221793b52

    • SSDEEP

      384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2k:ipQNwC3BEddsEqOt/hyJF+x3BEJwRro

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks