Overview

overview

7

Static

static

3

fec0cb9704...18.exe

windows7-x64

7

fec0cb9704...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fec0cb9704a12874b7d0dec9b1081acf_JaffaCakes118

  • Size

    143KB

  • Sample

    240929-r6e9vasakd

  • MD5

    fec0cb9704a12874b7d0dec9b1081acf

  • SHA1

    ac1d685ec15fd5b5f75dd02ae7a8ae6c1e2600df

  • SHA256

    b5ee9b348fb1d7969bd756c5c61f9e38bf88e61d0d1e9c6a8e7277eac556bddf

  • SHA512

    b3fc6c9ac12327401f351920b9ab3a2deb4d94cec47957b24b1f4df3410e75cfe8caf51192d66b2b1884445c31787bfb86aee6423c951a5fd1afb4fd0c868cf9

  • SSDEEP

    3072:WmhupnoeEvCkdFTC+pJqHFYoGtvmaYh1tJpW7ZHNbnpacBwvt8dmrgjv3:+dEvZXTtqHFAeaYbpWtHNbnpJwlEwg

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      fec0cb9704a12874b7d0dec9b1081acf_JaffaCakes118

    • Size

      143KB

    • MD5

      fec0cb9704a12874b7d0dec9b1081acf

    • SHA1

      ac1d685ec15fd5b5f75dd02ae7a8ae6c1e2600df

    • SHA256

      b5ee9b348fb1d7969bd756c5c61f9e38bf88e61d0d1e9c6a8e7277eac556bddf

    • SHA512

      b3fc6c9ac12327401f351920b9ab3a2deb4d94cec47957b24b1f4df3410e75cfe8caf51192d66b2b1884445c31787bfb86aee6423c951a5fd1afb4fd0c868cf9

    • SSDEEP

      3072:WmhupnoeEvCkdFTC+pJqHFYoGtvmaYh1tJpW7ZHNbnpacBwvt8dmrgjv3:+dEvZXTtqHFAeaYbpWtHNbnpJwlEwg

    Score
    7/10
    discoverypersistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks