Overview

overview

10

Static

static

3

0b8df3bf5e...18.exe

windows7-x64

10

0b8df3bf5e...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b8df3bf5e91decfd54292864e8a4be6_JaffaCakes118

  • Size

    1.9MB

  • Sample

    241002-tvxqvszare

  • MD5

    0b8df3bf5e91decfd54292864e8a4be6

  • SHA1

    495d398cd26dbdaea0714c6523fb9219f1ac17c9

  • SHA256

    d2b8634075294ce6a48ec8cbbcf357e0bd33aa4087e6ca920589226c8df17b95

  • SHA512

    340f49e37464b6982a867cfd2d650c3a5fe7ca23e28790a894cb21a60275102564bc72d3a167009f7241f53a7bddb4da2138eced51ccd968477223a9c3d3f00e

  • SSDEEP

    49152:bbLqOnW2F3IkPQuiAwEA80O0ywyJX1JFCGLvEcTIMMdY17c:OWPGuiz04yxXUQvx/yY14

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      0b8df3bf5e91decfd54292864e8a4be6_JaffaCakes118

    • Size

      1.9MB

    • MD5

      0b8df3bf5e91decfd54292864e8a4be6

    • SHA1

      495d398cd26dbdaea0714c6523fb9219f1ac17c9

    • SHA256

      d2b8634075294ce6a48ec8cbbcf357e0bd33aa4087e6ca920589226c8df17b95

    • SHA512

      340f49e37464b6982a867cfd2d650c3a5fe7ca23e28790a894cb21a60275102564bc72d3a167009f7241f53a7bddb4da2138eced51ccd968477223a9c3d3f00e

    • SSDEEP

      49152:bbLqOnW2F3IkPQuiAwEA80O0ywyJX1JFCGLvEcTIMMdY17c:OWPGuiz04yxXUQvx/yY14

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks