Overview

overview

10

Static

static

3

020cab994a...18.dll

windows7-x64

10

020cab994a...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    020cab994aeff9982d177c063ed63bdf_JaffaCakes118

  • Size

    236KB

  • Sample

    240930-st2srasdnj

  • MD5

    020cab994aeff9982d177c063ed63bdf

  • SHA1

    6c5ca5fa0c3081277122d1561eadfbf55a800e17

  • SHA256

    a5e9abc818450eda75b209f006a389c6ef75bcf19cd57e2d69b785fab412b795

  • SHA512

    3dbe26642a00cda6d3530aa8565c6a4039e1073131a9d627297bb2bdddce946c815917efb753b239d628960c65a8a709ef6426e3e0844d7a03848f28b8b842ba

  • SSDEEP

    3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIk:+Qj9U3jwO3rt5X

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      020cab994aeff9982d177c063ed63bdf_JaffaCakes118

    • Size

      236KB

    • MD5

      020cab994aeff9982d177c063ed63bdf

    • SHA1

      6c5ca5fa0c3081277122d1561eadfbf55a800e17

    • SHA256

      a5e9abc818450eda75b209f006a389c6ef75bcf19cd57e2d69b785fab412b795

    • SHA512

      3dbe26642a00cda6d3530aa8565c6a4039e1073131a9d627297bb2bdddce946c815917efb753b239d628960c65a8a709ef6426e3e0844d7a03848f28b8b842ba

    • SSDEEP

      3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIk:+Qj9U3jwO3rt5X

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks