Overview

overview

8

Static

static

3

20a0d06563...18.exe

windows7-x64

8

20a0d06563...18.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20a0d06563330c7dbd5afe77f7e9428e_JaffaCakes118

  • Size

    84KB

  • Sample

    240703-bywnvszhne

  • MD5

    20a0d06563330c7dbd5afe77f7e9428e

  • SHA1

    ebb0e2cd05461eedfe6f09a3d4c4a587d5de2bca

  • SHA256

    9ab0454b1c89f9ab21865516283b864de57874ced4dde085413a0ad67b47d9dc

  • SHA512

    af4dc6002d073b6b4a82081eccd12b27d5f17aea31d4c16d2565dd7e929b49152c04e1ca728f67bc2896743e94b2c6ada26c9910fe61f9b575961eec0a6cb9aa

  • SSDEEP

    1536:LCjPJjywFDzVUMKQNxGjgukyWKw9ufa6WuGvP:L+PJ/h7K2yNwsC6q

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      20a0d06563330c7dbd5afe77f7e9428e_JaffaCakes118

    • Size

      84KB

    • MD5

      20a0d06563330c7dbd5afe77f7e9428e

    • SHA1

      ebb0e2cd05461eedfe6f09a3d4c4a587d5de2bca

    • SHA256

      9ab0454b1c89f9ab21865516283b864de57874ced4dde085413a0ad67b47d9dc

    • SHA512

      af4dc6002d073b6b4a82081eccd12b27d5f17aea31d4c16d2565dd7e929b49152c04e1ca728f67bc2896743e94b2c6ada26c9910fe61f9b575961eec0a6cb9aa

    • SSDEEP

      1536:LCjPJjywFDzVUMKQNxGjgukyWKw9ufa6WuGvP:L+PJ/h7K2yNwsC6q

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Deletes itself

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks