Overview

overview

8

Static

static

3

0fe8191ec7...18.exe

windows7-x64

8

0fe8191ec7...18.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0fe8191ec7600142946111b82df947a4_JaffaCakes118

  • Size

    176KB

  • Sample

    241003-v9xj3s1gne

  • MD5

    0fe8191ec7600142946111b82df947a4

  • SHA1

    42932da45f36a3d476ea7b2c9e273fc860997cb0

  • SHA256

    1e4a1ba6e6daa55bd5a0503a0f4acc1aa6471815d725348c178aa7f77eb06535

  • SHA512

    33450e57614f2982b6a7554de3e93a01059b38b30f6e10b472ef5ce3b514e7cca1152e8aeeedac0cb87dc034fc2e35ed10678f6617fec6ee9b8e54e42fed0155

  • SSDEEP

    3072:nP1+b4ooAAA6c9RJoaZoV9456sT/NIzlLTBOTQUyZR6:nP8b4MhwaylLT

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      0fe8191ec7600142946111b82df947a4_JaffaCakes118

    • Size

      176KB

    • MD5

      0fe8191ec7600142946111b82df947a4

    • SHA1

      42932da45f36a3d476ea7b2c9e273fc860997cb0

    • SHA256

      1e4a1ba6e6daa55bd5a0503a0f4acc1aa6471815d725348c178aa7f77eb06535

    • SHA512

      33450e57614f2982b6a7554de3e93a01059b38b30f6e10b472ef5ce3b514e7cca1152e8aeeedac0cb87dc034fc2e35ed10678f6617fec6ee9b8e54e42fed0155

    • SSDEEP

      3072:nP1+b4ooAAA6c9RJoaZoV9456sT/NIzlLTBOTQUyZR6:nP8b4MhwaylLT

    Score
    8/10
    discoverypersistence

    • Drops file in Drivers directory

    • Event Triggered Execution: Image File Execution Options Injection

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks