Overview

overview

10

Static

static

3

159d8cdff8...18.exe

windows7-x64

10

159d8cdff8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    159d8cdff85fb63c42a90f1bc2afc540_JaffaCakes118

  • Size

    260KB

  • Sample

    241005-bpw82axbql

  • MD5

    159d8cdff85fb63c42a90f1bc2afc540

  • SHA1

    d10bce9f793c7557a04f4a1987d372f5478b2468

  • SHA256

    15b05f323fac24a089469a6c68d7ac8742e031cf04d4f0034259fc3007879da1

  • SHA512

    855b620f276e4da353c7b2b8365e514555eab81fcdaa729b6e3647b222c4997fbd8f757288adefd9322716fc934bffd66b1b672eb7dba7984b9fbd613a2f1419

  • SSDEEP

    3072:PWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1K:PWkWXV9wUezUroW+tCmCCfNGV

Score
10/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      159d8cdff85fb63c42a90f1bc2afc540_JaffaCakes118

    • Size

      260KB

    • MD5

      159d8cdff85fb63c42a90f1bc2afc540

    • SHA1

      d10bce9f793c7557a04f4a1987d372f5478b2468

    • SHA256

      15b05f323fac24a089469a6c68d7ac8742e031cf04d4f0034259fc3007879da1

    • SHA512

      855b620f276e4da353c7b2b8365e514555eab81fcdaa729b6e3647b222c4997fbd8f757288adefd9322716fc934bffd66b1b672eb7dba7984b9fbd613a2f1419

    • SSDEEP

      3072:PWkWRM0We9kVF3GezUroWlBCtCmCdXC1D1NGW1K:PWkWXV9wUezUroW+tCmCCfNGV

    Score
    10/10
    discoveryevasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks