Overview

overview

10

Static

static

3

ea9b5212fd...18.exe

windows7-x64

10

ea9b5212fd...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea9b5212fd51fac8dcd697f910162965_JaffaCakes118

  • Size

    13KB

  • Sample

    240919-fbxpvs1fnh

  • MD5

    ea9b5212fd51fac8dcd697f910162965

  • SHA1

    857fb6deb14330c818f28c8e05bc4c14330f97fd

  • SHA256

    b2d731faaf01b142d41d5ce21e227467d8cf6b02281eed81a0d2ef91c7670b21

  • SHA512

    00a5dacfc38f9ac05da0af11f0a9c3700c9f0ed3a7f5062f43f5d19d5e8e95528cd8ac2103d37f5525ff15132c7fe2dd939127143ae3a1addc2a07387a51886d

  • SSDEEP

    384:hkmI805tbJkyscMC94wPq6qewm5dFr64IE:zr3WMQrPq83d96o

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      ea9b5212fd51fac8dcd697f910162965_JaffaCakes118

    • Size

      13KB

    • MD5

      ea9b5212fd51fac8dcd697f910162965

    • SHA1

      857fb6deb14330c818f28c8e05bc4c14330f97fd

    • SHA256

      b2d731faaf01b142d41d5ce21e227467d8cf6b02281eed81a0d2ef91c7670b21

    • SHA512

      00a5dacfc38f9ac05da0af11f0a9c3700c9f0ed3a7f5062f43f5d19d5e8e95528cd8ac2103d37f5525ff15132c7fe2dd939127143ae3a1addc2a07387a51886d

    • SSDEEP

      384:hkmI805tbJkyscMC94wPq6qewm5dFr64IE:zr3WMQrPq83d96o

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks