Overview

overview

10

Static

static

3

ef1cd7bfec...18.exe

windows7-x64

10

ef1cd7bfec...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef1cd7bfec42c111b1b25b6452127eb2_JaffaCakes118

  • Size

    72KB

  • Sample

    240921-fn33eawepn

  • MD5

    ef1cd7bfec42c111b1b25b6452127eb2

  • SHA1

    2e706fe5f1e0f327b35fa2345e0114dc95adfffc

  • SHA256

    6cfcfcd480d829d742f200b24543ab2c5533fd5c2965fbda6435b7b98ace275e

  • SHA512

    c8052246c75d44469b8af588202564349be4c8e1ba2f019ce2992dd49bf5ee969bc0fa901b18df83b5d0c27fdaaad33c967a3718888047b1822e44a684fd25b5

  • SSDEEP

    384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2I:ipQNwC3BEddsEqOt/hyJF+x3BEJwRr0

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      ef1cd7bfec42c111b1b25b6452127eb2_JaffaCakes118

    • Size

      72KB

    • MD5

      ef1cd7bfec42c111b1b25b6452127eb2

    • SHA1

      2e706fe5f1e0f327b35fa2345e0114dc95adfffc

    • SHA256

      6cfcfcd480d829d742f200b24543ab2c5533fd5c2965fbda6435b7b98ace275e

    • SHA512

      c8052246c75d44469b8af588202564349be4c8e1ba2f019ce2992dd49bf5ee969bc0fa901b18df83b5d0c27fdaaad33c967a3718888047b1822e44a684fd25b5

    • SSDEEP

      384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2I:ipQNwC3BEddsEqOt/hyJF+x3BEJwRr0

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks