Overview

overview

10

Static

static

3

03e18b8529...18.dll

windows7-x64

10

03e18b8529...18.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    03e18b85296961b89b39224ae2ff9596_JaffaCakes118

  • Size

    236KB

  • Sample

    241001-brrfkatfpm

  • MD5

    03e18b85296961b89b39224ae2ff9596

  • SHA1

    088742c65151302ecf11eb4f46b31daa818a6146

  • SHA256

    b70dd32758536dfb19bddb3509ee5b9d58ba3a86003df6e566cbc1ed6934c0d6

  • SHA512

    7f7e8bc18a65fed4505136ef8964e3e6957c50b7f46e009a73df7acee21e1eb04e92711e94916a43e1f9601691203b4ebf1e9580b0652c7dd62234dc7df60bc3

  • SSDEEP

    3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIv:+Qj9U3jwO3rt5M

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      03e18b85296961b89b39224ae2ff9596_JaffaCakes118

    • Size

      236KB

    • MD5

      03e18b85296961b89b39224ae2ff9596

    • SHA1

      088742c65151302ecf11eb4f46b31daa818a6146

    • SHA256

      b70dd32758536dfb19bddb3509ee5b9d58ba3a86003df6e566cbc1ed6934c0d6

    • SHA512

      7f7e8bc18a65fed4505136ef8964e3e6957c50b7f46e009a73df7acee21e1eb04e92711e94916a43e1f9601691203b4ebf1e9580b0652c7dd62234dc7df60bc3

    • SSDEEP

      3072:SeqmgHwlaazN9U3J+P0wFp+bLrt2wkkIv:+Qj9U3jwO3rt5M

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks