Overview

overview

10

Static

static

3

fe6fa67616...18.dll

windows7-x64

10

fe6fa67616...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fe6fa67616977df85fd7ca37d8dfe125_JaffaCakes118

  • Size

    237KB

  • Sample

    240929-nmnkbswcjb

  • MD5

    fe6fa67616977df85fd7ca37d8dfe125

  • SHA1

    381becb5987b33a23984b1615654e450f6491592

  • SHA256

    17eec81d697cdd1df7b423147ab8d19a8dc088f2a3ed4feb2d62c6c95265e96e

  • SHA512

    d6a85e0445bc35d555bfece43ffad475e04e0a2d903f261402f4c054b9c67b8fb4d7deeb3b239ef84cd9c3fb80a74ec8deedf511d4feddf3333d1716b6c81465

  • SSDEEP

    3072:lZU34kQhUpQkOIT7ptOLR5X9Kbl7+9wkCP:gR5/ptOLBK5aEP

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      fe6fa67616977df85fd7ca37d8dfe125_JaffaCakes118

    • Size

      237KB

    • MD5

      fe6fa67616977df85fd7ca37d8dfe125

    • SHA1

      381becb5987b33a23984b1615654e450f6491592

    • SHA256

      17eec81d697cdd1df7b423147ab8d19a8dc088f2a3ed4feb2d62c6c95265e96e

    • SHA512

      d6a85e0445bc35d555bfece43ffad475e04e0a2d903f261402f4c054b9c67b8fb4d7deeb3b239ef84cd9c3fb80a74ec8deedf511d4feddf3333d1716b6c81465

    • SSDEEP

      3072:lZU34kQhUpQkOIT7ptOLR5X9Kbl7+9wkCP:gR5/ptOLBK5aEP

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks