Overview

overview

7

Static

static

1

269fe16642...18.exe

windows7-x64

7

269fe16642...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    269fe166421587ea6c355fc9da2c9b2f_JaffaCakes118

  • Size

    6.7MB

  • Sample

    241008-2q8lkavelp

  • MD5

    269fe166421587ea6c355fc9da2c9b2f

  • SHA1

    c449f3cf48357f5f076570152bd8e37bddff322b

  • SHA256

    92e49cd7ee8b6338b08419ff8bed6af98c13a919d484396b18896ac9acaf5c36

  • SHA512

    f1e5caa76a9941a95dd70f81e725219d87293032714988781edf3f61ba25f260c8da83ed87aa5544206d798b77c56e491b7be67a987e0501c74cdd20204da78b

  • SSDEEP

    196608:lpwit8AL88eVw6dD42oycB6X7nd2VEEKeDGlU:lpY94tyck7dQKeDGlU

Score
7/10
discovery

Malware Config

Targets

    • Target

      269fe166421587ea6c355fc9da2c9b2f_JaffaCakes118

    • Size

      6.7MB

    • MD5

      269fe166421587ea6c355fc9da2c9b2f

    • SHA1

      c449f3cf48357f5f076570152bd8e37bddff322b

    • SHA256

      92e49cd7ee8b6338b08419ff8bed6af98c13a919d484396b18896ac9acaf5c36

    • SHA512

      f1e5caa76a9941a95dd70f81e725219d87293032714988781edf3f61ba25f260c8da83ed87aa5544206d798b77c56e491b7be67a987e0501c74cdd20204da78b

    • SSDEEP

      196608:lpwit8AL88eVw6dD42oycB6X7nd2VEEKeDGlU:lpY94tyck7dQKeDGlU

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks