Overview

overview

10

Static

static

3

f41554061f...18.exe

windows7-x64

10

f41554061f...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f41554061fccb711d3dfdc0ea961b27d_JaffaCakes118

  • Size

    404KB

  • Sample

    240416-w9j5eshe44

  • MD5

    f41554061fccb711d3dfdc0ea961b27d

  • SHA1

    d9127e6afa200562f59fb65910ac026e00319891

  • SHA256

    762a8d3c5e59f2e8046eda790d97457f8afdfbc9517f99d4136e400a89086f75

  • SHA512

    2fc117fd3b371be8acbd2727aaafa3d1a1b0b9cbc42786f6cd507ad59ebd260a54c8676476ba202ac0741ac86dec4922b95b80c148b67d9946c75c6764715f1d

  • SSDEEP

    6144:i4INpROSJfcd1tuP6MQsQ123GSxJIIVY0VE8gySVbjboPIZNTBTIK4:i4UROm0tuPWsQX4e/cE8zeDxZ/IK

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      f41554061fccb711d3dfdc0ea961b27d_JaffaCakes118

    • Size

      404KB

    • MD5

      f41554061fccb711d3dfdc0ea961b27d

    • SHA1

      d9127e6afa200562f59fb65910ac026e00319891

    • SHA256

      762a8d3c5e59f2e8046eda790d97457f8afdfbc9517f99d4136e400a89086f75

    • SHA512

      2fc117fd3b371be8acbd2727aaafa3d1a1b0b9cbc42786f6cd507ad59ebd260a54c8676476ba202ac0741ac86dec4922b95b80c148b67d9946c75c6764715f1d

    • SSDEEP

      6144:i4INpROSJfcd1tuP6MQsQ123GSxJIIVY0VE8gySVbjboPIZNTBTIK4:i4UROm0tuPWsQX4e/cE8zeDxZ/IK

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks