Overview

overview

10

Static

static

3

036f40c2d7...18.dll

windows7-x64

10

036f40c2d7...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    036f40c2d70147f8bc2baaf736a6282d_JaffaCakes118

  • Size

    236KB

  • Sample

    240930-1286ssxejp

  • MD5

    036f40c2d70147f8bc2baaf736a6282d

  • SHA1

    fb84d0e1932638406633c3050448338dcba03e07

  • SHA256

    b2347e434830d14b60a6f94d8fb03d99582208d695c502d8b381a72d0b94768b

  • SHA512

    16ca854688547857647ef64ad59f011e389c2491d4fa287d818225f9bc4ffe5087fa1a9b906db040b14740db44867c64917807ccf996a72501f19f5af999dde1

  • SSDEEP

    3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIK:+Qj9U3jwO3rt5F

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      036f40c2d70147f8bc2baaf736a6282d_JaffaCakes118

    • Size

      236KB

    • MD5

      036f40c2d70147f8bc2baaf736a6282d

    • SHA1

      fb84d0e1932638406633c3050448338dcba03e07

    • SHA256

      b2347e434830d14b60a6f94d8fb03d99582208d695c502d8b381a72d0b94768b

    • SHA512

      16ca854688547857647ef64ad59f011e389c2491d4fa287d818225f9bc4ffe5087fa1a9b906db040b14740db44867c64917807ccf996a72501f19f5af999dde1

    • SSDEEP

      3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIK:+Qj9U3jwO3rt5F

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks