Overview

overview

10

Static

static

3

033dfec4a8...18.dll

windows7-x64

10

033dfec4a8...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    033dfec4a8c5511377fc6818e127dff3_JaffaCakes118

  • Size

    236KB

  • Sample

    240930-zswzfavdpl

  • MD5

    033dfec4a8c5511377fc6818e127dff3

  • SHA1

    a3c7e9dcf0f6614a339467d2108362f1cc1b679b

  • SHA256

    b48f93ef88e01f66c44bd9880cb2e4b728955d6a6e7331f4e4b637e40ba25f8c

  • SHA512

    582960fd3108f6ae859082cf4fd6415fb568cc86bceea20b888e421179efceea51c310b13d1878e9daef265af5de2658197623af66fd9ff2f3e3a24018b7d154

  • SSDEEP

    3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIQ:+Qj9U3jwO3rt5L

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      033dfec4a8c5511377fc6818e127dff3_JaffaCakes118

    • Size

      236KB

    • MD5

      033dfec4a8c5511377fc6818e127dff3

    • SHA1

      a3c7e9dcf0f6614a339467d2108362f1cc1b679b

    • SHA256

      b48f93ef88e01f66c44bd9880cb2e4b728955d6a6e7331f4e4b637e40ba25f8c

    • SHA512

      582960fd3108f6ae859082cf4fd6415fb568cc86bceea20b888e421179efceea51c310b13d1878e9daef265af5de2658197623af66fd9ff2f3e3a24018b7d154

    • SSDEEP

      3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIQ:+Qj9U3jwO3rt5L

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks