Overview

overview

10

Static

static

3

058814308e...18.exe

windows7-x64

10

058814308e...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    058814308e14067b3581ccd39427615c_JaffaCakes118

  • Size

    184KB

  • Sample

    241001-mxdmfavhjq

  • MD5

    058814308e14067b3581ccd39427615c

  • SHA1

    e3fd365a83d774f715693e55e113ff782a70d211

  • SHA256

    f190b2ea5f38e7b7a667e45039ed7cdc921c954c0a06e2a3a1e65ebb075ae5a6

  • SHA512

    c6002718e3406791ba237115452f2e36b21ded6d4f74e6673412c6b1cdb074c7563a2dcfbad23a1c4c507a48b4ba03a2ef30a517f8dd431b654006705c6304b0

  • SSDEEP

    3072:GWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1M:GWkWXV9wUezUroW+tCmCCfNGP

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      058814308e14067b3581ccd39427615c_JaffaCakes118

    • Size

      184KB

    • MD5

      058814308e14067b3581ccd39427615c

    • SHA1

      e3fd365a83d774f715693e55e113ff782a70d211

    • SHA256

      f190b2ea5f38e7b7a667e45039ed7cdc921c954c0a06e2a3a1e65ebb075ae5a6

    • SHA512

      c6002718e3406791ba237115452f2e36b21ded6d4f74e6673412c6b1cdb074c7563a2dcfbad23a1c4c507a48b4ba03a2ef30a517f8dd431b654006705c6304b0

    • SSDEEP

      3072:GWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1M:GWkWXV9wUezUroW+tCmCCfNGP

    Score
    10/10
    discoveryevasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks