Overview

overview

7

Static

static

3

6fe3ad9fc9...18.exe

windows7-x64

7

6fe3ad9fc9...18.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6fe3ad9fc9e79153266fc6ead6450389_JaffaCakes118

  • Size

    41KB

  • Sample

    241023-t3zkeszeqg

  • MD5

    6fe3ad9fc9e79153266fc6ead6450389

  • SHA1

    6b5b9ce6685329548afd2a8472817f822f08ffb0

  • SHA256

    e9ba040cce7e9f64d0a0404dacc692eac78744ae64dbf21475957dec01081bc0

  • SHA512

    840c268e0719e97e4dd4f254b6a8d8432531f2f492c7e1dc74b9491ffba63792b99ecc458950d620876006ad18fae93141ecabe530e4fdb6cbec6d6244d696a8

  • SSDEEP

    768:giMLOSVUwaiJA0DwnQYxx+bI7wC6VkT/bmyf05kJdSl:U/c+YwK3s5bl

Score
7/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      6fe3ad9fc9e79153266fc6ead6450389_JaffaCakes118

    • Size

      41KB

    • MD5

      6fe3ad9fc9e79153266fc6ead6450389

    • SHA1

      6b5b9ce6685329548afd2a8472817f822f08ffb0

    • SHA256

      e9ba040cce7e9f64d0a0404dacc692eac78744ae64dbf21475957dec01081bc0

    • SHA512

      840c268e0719e97e4dd4f254b6a8d8432531f2f492c7e1dc74b9491ffba63792b99ecc458950d620876006ad18fae93141ecabe530e4fdb6cbec6d6244d696a8

    • SSDEEP

      768:giMLOSVUwaiJA0DwnQYxx+bI7wC6VkT/bmyf05kJdSl:U/c+YwK3s5bl

    Score
    7/10
    defense_evasiondiscovery

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks