Overview

overview

10

Static

static

10

f893f3a0a5...18.msi

windows7-x64

f893f3a0a5...18.msi

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f893f3a0a5b239fca979af9ac4f33de3_JaffaCakes118

  • Size

    7.2MB

  • Sample

    240926-ryaz6asbrn

  • MD5

    f893f3a0a5b239fca979af9ac4f33de3

  • SHA1

    ab1d72543fe1a6b4f041e875ea003c55aec92778

  • SHA256

    b9201c2a66351ecdf88775a21f5de72fb3ef6fe5bd16519927546e56887ee7f8

  • SHA512

    c8a86a4bafaa87cd6378814b5d7f0ab440c3435833d5591f64140cf081f6acbd1a7005454a906d339477adb5783597a82b710069e9b825b89e1f34071ff6fafc

  • SSDEEP

    196608:3LpnsZBDzOV/Wa4dr5FI0J0wxpFzydiM8sGeLvqu5B:3tneBDyV+1y0J00rwTRjdB

Score
10/10
purplefoxdiscoverypersistenceprivilege_escalationrootkit

Malware Config

Targets

    • Target

      f893f3a0a5b239fca979af9ac4f33de3_JaffaCakes118

    • Size

      7.2MB

    • MD5

      f893f3a0a5b239fca979af9ac4f33de3

    • SHA1

      ab1d72543fe1a6b4f041e875ea003c55aec92778

    • SHA256

      b9201c2a66351ecdf88775a21f5de72fb3ef6fe5bd16519927546e56887ee7f8

    • SHA512

      c8a86a4bafaa87cd6378814b5d7f0ab440c3435833d5591f64140cf081f6acbd1a7005454a906d339477adb5783597a82b710069e9b825b89e1f34071ff6fafc

    • SSDEEP

      196608:3LpnsZBDzOV/Wa4dr5FI0J0wxpFzydiM8sGeLvqu5B:3tneBDyV+1y0J00rwTRjdB

    Score
    8/10
    discoverypersistenceprivilege_escalation

    • Drops file in Drivers directory

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks