Overview

overview

10

Static

static

3

fca1a1b6ff...18.exe

windows7-x64

10

fca1a1b6ff...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fca1a1b6ffc1ab34845901dc5519e845_JaffaCakes118

  • Size

    76KB

  • Sample

    240928-tathpswfmb

  • MD5

    fca1a1b6ffc1ab34845901dc5519e845

  • SHA1

    9e2664b5e2d3e0d277939633187d67555576e512

  • SHA256

    ddfc81f00cf40069777c5dd30d15dd71c28a59f43df4eef086fc48e54efaa0d3

  • SHA512

    ac8340a88952aa31047619825303d220283d4caf708f9e80e1a6b5accd31d3a6f4fbe88cd7b22e89baac5a342e65bb543c32f016de85abc7dc5608d888fff022

  • SSDEEP

    768:+embNRqsuhlGOBrhgFwumSCbxTGy/BBGg4NKJJKqUThbJ32+ve7i40vN0TlT+Xk2:Mnqdu3abBGy3G8V0iuo2b

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      fca1a1b6ffc1ab34845901dc5519e845_JaffaCakes118

    • Size

      76KB

    • MD5

      fca1a1b6ffc1ab34845901dc5519e845

    • SHA1

      9e2664b5e2d3e0d277939633187d67555576e512

    • SHA256

      ddfc81f00cf40069777c5dd30d15dd71c28a59f43df4eef086fc48e54efaa0d3

    • SHA512

      ac8340a88952aa31047619825303d220283d4caf708f9e80e1a6b5accd31d3a6f4fbe88cd7b22e89baac5a342e65bb543c32f016de85abc7dc5608d888fff022

    • SSDEEP

      768:+embNRqsuhlGOBrhgFwumSCbxTGy/BBGg4NKJJKqUThbJ32+ve7i40vN0TlT+Xk2:Mnqdu3abBGy3G8V0iuo2b

    Score
    10/10
    discoveryevasionpersistence

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks