Overview

overview

10

Static

static

3

eabf439a5b...18.exe

windows7-x64

10

eabf439a5b...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eabf439a5bc49eec0ca32278e7673311_JaffaCakes118

  • Size

    45KB

  • Sample

    240919-g274ysvemp

  • MD5

    eabf439a5bc49eec0ca32278e7673311

  • SHA1

    312a1c4e37a96f4507f8b3075784e957b7155755

  • SHA256

    58e19d3ea468ed30dbf7d2b84186a3276eb8263b701f67d7255435f9fa0edc68

  • SHA512

    b82223462f7d034245330bbbf6ce701da5fdd8040abd94e31aa27f4bd296454a565fb6b2ddebe28ed2d7d33a11f9d2dadd813bdbd2e4a71a022644260f313f6b

  • SSDEEP

    768:PTAm5hiTllzeF/AJOTmbWa8RYdiU3/7Shy5nv9/tw/xmcQM/:PLIcNTcWATPuhI9a/x4w

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      eabf439a5bc49eec0ca32278e7673311_JaffaCakes118

    • Size

      45KB

    • MD5

      eabf439a5bc49eec0ca32278e7673311

    • SHA1

      312a1c4e37a96f4507f8b3075784e957b7155755

    • SHA256

      58e19d3ea468ed30dbf7d2b84186a3276eb8263b701f67d7255435f9fa0edc68

    • SHA512

      b82223462f7d034245330bbbf6ce701da5fdd8040abd94e31aa27f4bd296454a565fb6b2ddebe28ed2d7d33a11f9d2dadd813bdbd2e4a71a022644260f313f6b

    • SSDEEP

      768:PTAm5hiTllzeF/AJOTmbWa8RYdiU3/7Shy5nv9/tw/xmcQM/:PLIcNTcWATPuhI9a/x4w

    Score
    10/10
    discoveryevasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks