Overview

overview

10

Static

static

5

ec835edab4...18.exe

windows7-x64

10

ec835edab4...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ec835edab4db0cd046ac0431d0031093_JaffaCakes118

  • Size

    638KB

  • Sample

    240920-a49bgazdrc

  • MD5

    ec835edab4db0cd046ac0431d0031093

  • SHA1

    0a548a3d415a56f3615e4d71def79d835add2c3f

  • SHA256

    c0f8dddd2a4bf62d306aacd2fb69ea2f8170ebcc5876f76290bd2c3a00d27610

  • SHA512

    f21d6050f436c336b15b3cfc60951116e4be0fb3102d349bf5a30b0246b2140bb3b491eb17c68d5a01ff893eb8930a7037074ca4fcc94394acb4d2117fef4a23

  • SSDEEP

    12288:9hkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcbNyf:LRmJkcoQricOIQxiZY1WNyf

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      ec835edab4db0cd046ac0431d0031093_JaffaCakes118

    • Size

      638KB

    • MD5

      ec835edab4db0cd046ac0431d0031093

    • SHA1

      0a548a3d415a56f3615e4d71def79d835add2c3f

    • SHA256

      c0f8dddd2a4bf62d306aacd2fb69ea2f8170ebcc5876f76290bd2c3a00d27610

    • SHA512

      f21d6050f436c336b15b3cfc60951116e4be0fb3102d349bf5a30b0246b2140bb3b491eb17c68d5a01ff893eb8930a7037074ca4fcc94394acb4d2117fef4a23

    • SSDEEP

      12288:9hkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcbNyf:LRmJkcoQricOIQxiZY1WNyf

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks