Overview

overview

10

Static

static

3

299842b9c8...18.exe

windows7-x64

10

299842b9c8...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    299842b9c897755a46efcb93df554a07_JaffaCakes118

  • Size

    22.0MB

  • Sample

    241009-df56pa1hkc

  • MD5

    299842b9c897755a46efcb93df554a07

  • SHA1

    62252dae824977e7b8c75f310c06844f4fddb5a8

  • SHA256

    aaadcb542f9c56c0abdf1dcba049ad6395312fdb6cc114863abf67c1a2990e27

  • SHA512

    3ab4e1c2eea37bdb0976b01c91cc5774186e591445ac137ca30eede21af8a23d6da868552d68a70e7c9a69b0d5109acf72b7c3acd352ba457ec13374ea931239

  • SSDEEP

    393216:Zd16aPaPaPaPaPaPaPaYaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPai:56aPaPaPaPaPaPaPaYaPaPaPaPaPaPaz

Score
10/10
discoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      299842b9c897755a46efcb93df554a07_JaffaCakes118

    • Size

      22.0MB

    • MD5

      299842b9c897755a46efcb93df554a07

    • SHA1

      62252dae824977e7b8c75f310c06844f4fddb5a8

    • SHA256

      aaadcb542f9c56c0abdf1dcba049ad6395312fdb6cc114863abf67c1a2990e27

    • SHA512

      3ab4e1c2eea37bdb0976b01c91cc5774186e591445ac137ca30eede21af8a23d6da868552d68a70e7c9a69b0d5109acf72b7c3acd352ba457ec13374ea931239

    • SSDEEP

      393216:Zd16aPaPaPaPaPaPaPaYaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPaPai:56aPaPaPaPaPaPaPaYaPaPaPaPaPaPaz

    Score
    10/10
    discoveryevasionpersistencetrojan

    • UAC bypass

      evasiontrojan

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks