Overview

overview

10

Static

static

3

01506913e2...18.exe

windows7-x64

10

01506913e2...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01506913e2ee47ff826387c306928add_JaffaCakes118

  • Size

    72KB

  • Sample

    240930-pm1qbsvflp

  • MD5

    01506913e2ee47ff826387c306928add

  • SHA1

    38c210a2a198c1baf19b508b38599e43e9ddfa36

  • SHA256

    b332373fd69bd5a0b999122fc6a511b066cd8252f0c54905787ba9ff68dd767b

  • SHA512

    14919b0c2d416de028d3ec6de37c928fcdd84e83cc57db3529483485a136755dccb5831407e66ddfd2200480de2c96974e13c2bc1ba12e09d09b857b1c77d57e

  • SSDEEP

    384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2N:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrPZ

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      01506913e2ee47ff826387c306928add_JaffaCakes118

    • Size

      72KB

    • MD5

      01506913e2ee47ff826387c306928add

    • SHA1

      38c210a2a198c1baf19b508b38599e43e9ddfa36

    • SHA256

      b332373fd69bd5a0b999122fc6a511b066cd8252f0c54905787ba9ff68dd767b

    • SHA512

      14919b0c2d416de028d3ec6de37c928fcdd84e83cc57db3529483485a136755dccb5831407e66ddfd2200480de2c96974e13c2bc1ba12e09d09b857b1c77d57e

    • SSDEEP

      384:i6wayA+1mwnA353BXR+oGfP5d/ZBHXME+l93qPAqee/w6yJ/wWD+S83BXR+oGf2N:ipQNwC3BEddsEqOt/hyJF+x3BEJwRrPZ

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Disables RegEdit via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks