Overview

overview

10

Static

static

3

065571bfff...18.dll

windows7-x64

10

065571bfff...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    065571bfff8adaa104d05002153efd64_JaffaCakes118

  • Size

    238KB

  • Sample

    241001-ssamwazgqe

  • MD5

    065571bfff8adaa104d05002153efd64

  • SHA1

    2abda22ff2e5183815ff2ca96f43a10be957c14d

  • SHA256

    4b2639b5a9fe50d079c0b0c24894b470531a3cfc95aeadd360c8d68e66d8a452

  • SHA512

    274730e454d868e2ebc8691a47636039a43a4c875c94b2a8866c893cff3d273d734936abb3436709711c0baab6fc5c27ef0b72e67393875f4636a4e5664de25b

  • SSDEEP

    3072:d/YKmCJaqJ2sMOmj+Or6fc1FG6MrEoEvkYw:ddmCJaIpmaOr/F9QEQ

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      065571bfff8adaa104d05002153efd64_JaffaCakes118

    • Size

      238KB

    • MD5

      065571bfff8adaa104d05002153efd64

    • SHA1

      2abda22ff2e5183815ff2ca96f43a10be957c14d

    • SHA256

      4b2639b5a9fe50d079c0b0c24894b470531a3cfc95aeadd360c8d68e66d8a452

    • SHA512

      274730e454d868e2ebc8691a47636039a43a4c875c94b2a8866c893cff3d273d734936abb3436709711c0baab6fc5c27ef0b72e67393875f4636a4e5664de25b

    • SSDEEP

      3072:d/YKmCJaqJ2sMOmj+Or6fc1FG6MrEoEvkYw:ddmCJaIpmaOr/F9QEQ

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks