Overview

overview

10

Static

static

3

007aeab32e...18.exe

windows7-x64

10

007aeab32e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    007aeab32e5b4fc3993cfdb7a1461ed3_JaffaCakes118

  • Size

    72KB

  • Sample

    240930-kvz2jsweql

  • MD5

    007aeab32e5b4fc3993cfdb7a1461ed3

  • SHA1

    5ea8e2ac32d38bbda22c04969e4995eb19f0d7ec

  • SHA256

    e117deccdb44bbc77aa35a6b4ca72b3ba92a3cfb69eff3f9cb1bd4794a2c8102

  • SHA512

    4fd76ee1e0add888191fbb532d8eb36721b9cf070cd5628bab608798b3f45e402731e942fb797d2cc82fef09c380e709723041bb3792b0c1a22e45e2c5405db8

  • SSDEEP

    384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf21:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrPh

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      007aeab32e5b4fc3993cfdb7a1461ed3_JaffaCakes118

    • Size

      72KB

    • MD5

      007aeab32e5b4fc3993cfdb7a1461ed3

    • SHA1

      5ea8e2ac32d38bbda22c04969e4995eb19f0d7ec

    • SHA256

      e117deccdb44bbc77aa35a6b4ca72b3ba92a3cfb69eff3f9cb1bd4794a2c8102

    • SHA512

      4fd76ee1e0add888191fbb532d8eb36721b9cf070cd5628bab608798b3f45e402731e942fb797d2cc82fef09c380e709723041bb3792b0c1a22e45e2c5405db8

    • SSDEEP

      384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf21:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrPh

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks