Overview

overview

10

Static

static

7

JaffaCakes...5b.exe

windows7-x64

10

JaffaCakes...5b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_174b2bd8abd1b4a39744672fde7ea15b

  • Size

    411KB

  • Sample

    250222-e7r9ksymel

  • MD5

    174b2bd8abd1b4a39744672fde7ea15b

  • SHA1

    0f6d2eec318e7a86ae838d35dd8297d9aeb76438

  • SHA256

    55250244b608f4132609cb94a19ed1e128bb8c1e8c7a31ac376ca201babcff9a

  • SHA512

    11eea6628ff4df8b87b86bf869b361be4095b4bb4461c7594ba5e697f94f0ea4424e09b48a4c96a129ad1f8fa9d1331b92d148029dba4a1f19ba1cd03823e4ee

  • SSDEEP

    12288:elPCv3N72VuKf4bO1j6Gi03Rl/7ie0jPMs:exCPN72VTAOV6GjiBAs

Score
10/10
aspackv2defense_evasiondiscovery

Malware Config

Targets

    • Target

      JaffaCakes118_174b2bd8abd1b4a39744672fde7ea15b

    • Size

      411KB

    • MD5

      174b2bd8abd1b4a39744672fde7ea15b

    • SHA1

      0f6d2eec318e7a86ae838d35dd8297d9aeb76438

    • SHA256

      55250244b608f4132609cb94a19ed1e128bb8c1e8c7a31ac376ca201babcff9a

    • SHA512

      11eea6628ff4df8b87b86bf869b361be4095b4bb4461c7594ba5e697f94f0ea4424e09b48a4c96a129ad1f8fa9d1331b92d148029dba4a1f19ba1cd03823e4ee

    • SSDEEP

      12288:elPCv3N72VuKf4bO1j6Gi03Rl/7ie0jPMs:exCPN72VTAOV6GjiBAs

    Score
    10/10
    defense_evasiondiscovery

    • Modifies visiblity of hidden/system files in Explorer

      defense_evasion

    • Drops file in Drivers directory

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks