Overview

overview

10

Static

static

3

e190f1d9ae...18.exe

windows7-x64

10

e190f1d9ae...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e190f1d9aef84c22ec7c857a56785adb_JaffaCakes118

  • Size

    157KB

  • Sample

    240915-dc3ldsscln

  • MD5

    e190f1d9aef84c22ec7c857a56785adb

  • SHA1

    e51e673899c67e5a9110277353864d5ecec4c197

  • SHA256

    4658d9f3edf98de5677502f447f19b02398f4cf4c9ad59cf775cac1704c7a2e2

  • SHA512

    cef445ee8bc7575769084357c6270a9ab4b26ea3d7b2e899dabe084d60fd91f05aa522338fca4f5ded39604d5ed8172542fb4dcad436495842c60a870925bb02

  • SSDEEP

    3072:RYOHTvhFXQmtmwhEF7v7x/v2aIBfzC5D6Rue/TUwr:RBHFFXQmtmwhEF7vlWVCE/TR

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      e190f1d9aef84c22ec7c857a56785adb_JaffaCakes118

    • Size

      157KB

    • MD5

      e190f1d9aef84c22ec7c857a56785adb

    • SHA1

      e51e673899c67e5a9110277353864d5ecec4c197

    • SHA256

      4658d9f3edf98de5677502f447f19b02398f4cf4c9ad59cf775cac1704c7a2e2

    • SHA512

      cef445ee8bc7575769084357c6270a9ab4b26ea3d7b2e899dabe084d60fd91f05aa522338fca4f5ded39604d5ed8172542fb4dcad436495842c60a870925bb02

    • SSDEEP

      3072:RYOHTvhFXQmtmwhEF7v7x/v2aIBfzC5D6Rue/TUwr:RBHFFXQmtmwhEF7vlWVCE/TR

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks