Overview

overview

10

Static

static

3

3cff5fab01...18.exe

windows7-x64

10

3cff5fab01...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3cff5fab01d717d9c97d0c3c924b81dd_JaffaCakes118

  • Size

    452KB

  • Sample

    241013-bjt7gswamq

  • MD5

    3cff5fab01d717d9c97d0c3c924b81dd

  • SHA1

    893d555d87b5e93bb91841f9f20bcda05d4bc66b

  • SHA256

    080b9ae8b110caaca131a3aceb60ea677d0dcc6be11de2309cad07a51c707319

  • SHA512

    58b790dc257ff6c94087d2f8858c00b7fa587af61982e913d2d9d22b1a4b8191942103112b827884a41c2b2d5ce18b27e7583a994055b7b86acb0e407cc2425b

  • SSDEEP

    12288:ANidGxc4O98Twn+aQ5tfgHn429HTZ34zXzCj7sdaAYUb:ANQGSt8IXQ51gH429H134zziCY

Score
10/10
discoveryevasionpersistenceupx

Malware Config

Targets

    • Target

      3cff5fab01d717d9c97d0c3c924b81dd_JaffaCakes118

    • Size

      452KB

    • MD5

      3cff5fab01d717d9c97d0c3c924b81dd

    • SHA1

      893d555d87b5e93bb91841f9f20bcda05d4bc66b

    • SHA256

      080b9ae8b110caaca131a3aceb60ea677d0dcc6be11de2309cad07a51c707319

    • SHA512

      58b790dc257ff6c94087d2f8858c00b7fa587af61982e913d2d9d22b1a4b8191942103112b827884a41c2b2d5ce18b27e7583a994055b7b86acb0e407cc2425b

    • SSDEEP

      12288:ANidGxc4O98Twn+aQ5tfgHn429HTZ34zXzCj7sdaAYUb:ANQGSt8IXQ51gH429H134zziCY

    Score
    10/10
    discoveryevasionpersistenceupx

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks