Overview

overview

10

Static

static

1

f5b36dc43e...18.exe

windows7-x64

10

f5b36dc43e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f5b36dc43e84a43621681d6176ae87c0_JaffaCakes118

  • Size

    420KB

  • Sample

    240925-lecfzs1arf

  • MD5

    f5b36dc43e84a43621681d6176ae87c0

  • SHA1

    7d5f06281bb6bf77894df6e6307606c9537010e4

  • SHA256

    99f438579686c85f2f7611a9165086f3a78b1a3ccea6e2c012a2dce2c530c6a1

  • SHA512

    c8f617f52a0e50c039e37b1fcc57294a3b276972e4e6dccaf052bca7bff2e4cf132da7b28252eb741e2371c038827790c135e6c1154bfaa50151307411254efc

  • SSDEEP

    12288:DX0Ffsi0l0vPKLQvaRc+UyeXSy+QBPtiTEMP:DXGE7l0vSLQv8c+UyYFBA9P

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      f5b36dc43e84a43621681d6176ae87c0_JaffaCakes118

    • Size

      420KB

    • MD5

      f5b36dc43e84a43621681d6176ae87c0

    • SHA1

      7d5f06281bb6bf77894df6e6307606c9537010e4

    • SHA256

      99f438579686c85f2f7611a9165086f3a78b1a3ccea6e2c012a2dce2c530c6a1

    • SHA512

      c8f617f52a0e50c039e37b1fcc57294a3b276972e4e6dccaf052bca7bff2e4cf132da7b28252eb741e2371c038827790c135e6c1154bfaa50151307411254efc

    • SSDEEP

      12288:DX0Ffsi0l0vPKLQvaRc+UyeXSy+QBPtiTEMP:DXGE7l0vSLQv8c+UyYFBA9P

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks