Overview

overview

7

Static

static

3

ef65c2e321...18.exe

windows7-x64

ef65c2e321...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef65c2e32142369a43f23c0f9428c5f3_JaffaCakes118

  • Size

    87KB

  • Sample

    240921-j75l5asgrr

  • MD5

    ef65c2e32142369a43f23c0f9428c5f3

  • SHA1

    81567a85f3b103a3d4b551ffaaaae18784e486a5

  • SHA256

    e20879de320fc48464853abe412d8b9656127770f86a190f2026f701de017722

  • SHA512

    0827c204899e50f4249ff179579ab683b7ffda2e886ecb30e2684722a967747103cab05292f77b6895d4e8d60409893f14b9bafef80c723b39bbb3cfa055bd86

  • SSDEEP

    1536:YqL4a2JBg0iJTwQNw0QdCAN34TESeU32zXE3wCAD4Dzq6k/LTkesY:R8JJBVS8eQd714YSeUg03kkD26sOY

Score
7/10
defense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      ef65c2e32142369a43f23c0f9428c5f3_JaffaCakes118

    • Size

      87KB

    • MD5

      ef65c2e32142369a43f23c0f9428c5f3

    • SHA1

      81567a85f3b103a3d4b551ffaaaae18784e486a5

    • SHA256

      e20879de320fc48464853abe412d8b9656127770f86a190f2026f701de017722

    • SHA512

      0827c204899e50f4249ff179579ab683b7ffda2e886ecb30e2684722a967747103cab05292f77b6895d4e8d60409893f14b9bafef80c723b39bbb3cfa055bd86

    • SSDEEP

      1536:YqL4a2JBg0iJTwQNw0QdCAN34TESeU32zXE3wCAD4Dzq6k/LTkesY:R8JJBVS8eQd714YSeUg03kkD26sOY

    Score
    7/10
    defense_evasiondiscoverypersistence

    • Deletes itself

    • Adds Run key to start application

      persistence

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks