Overview

overview

10

Static

static

3

00e28375a8...18.exe

windows7-x64

10

00e28375a8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00e28375a8ea126e587616f92ffe3279_JaffaCakes118

  • Size

    72KB

  • Sample

    240930-mmzf6avdnc

  • MD5

    00e28375a8ea126e587616f92ffe3279

  • SHA1

    5aa940d6332453719f5f22384019718cc3ae3811

  • SHA256

    3a6c709c5fb10c8bc4afe72589d3595d57b488ed82c67560673f865a0c438eb0

  • SHA512

    3aae9be009a61c7523fa73d81cc3f693e0ab3a3c2831be997f7eca0e241e77e9f3d18bbd0295771de033fd32a11785c6dc9d47b7f9c84b2f0cc5001e2b944420

  • SSDEEP

    384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2S:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrPG

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      00e28375a8ea126e587616f92ffe3279_JaffaCakes118

    • Size

      72KB

    • MD5

      00e28375a8ea126e587616f92ffe3279

    • SHA1

      5aa940d6332453719f5f22384019718cc3ae3811

    • SHA256

      3a6c709c5fb10c8bc4afe72589d3595d57b488ed82c67560673f865a0c438eb0

    • SHA512

      3aae9be009a61c7523fa73d81cc3f693e0ab3a3c2831be997f7eca0e241e77e9f3d18bbd0295771de033fd32a11785c6dc9d47b7f9c84b2f0cc5001e2b944420

    • SSDEEP

      384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2S:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrPG

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks