Overview

overview

10

Static

static

3

f88e0773c9...18.exe

windows7-x64

10

f88e0773c9...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f88e0773c9c35d6330376f30aedd5733_JaffaCakes118

  • Size

    408KB

  • Sample

    240418-xk4yzadb31

  • MD5

    f88e0773c9c35d6330376f30aedd5733

  • SHA1

    e755b1e7ef5b7020be9333a74edd934e858fc928

  • SHA256

    4b3faf9c3e074e7691152384ee85906946607acb9cb2721d4ed4c44961e6886e

  • SHA512

    3cc648b2577d4bcaccccb4808bda2c757033b9472695418d8dead7a0fd49af819dafd945daf3b7c8025937ad11f144c18489e3b31b2330a7377f2809c9c54070

  • SSDEEP

    6144:q7YmCW3NntZfHhKnARLebLEkAKqyMt5+lFNtLYe5vUeC0jPBn2KwTE0n0Yq0:q7YvWtp4EqLEAikFNxYocajBnAwGq0

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      f88e0773c9c35d6330376f30aedd5733_JaffaCakes118

    • Size

      408KB

    • MD5

      f88e0773c9c35d6330376f30aedd5733

    • SHA1

      e755b1e7ef5b7020be9333a74edd934e858fc928

    • SHA256

      4b3faf9c3e074e7691152384ee85906946607acb9cb2721d4ed4c44961e6886e

    • SHA512

      3cc648b2577d4bcaccccb4808bda2c757033b9472695418d8dead7a0fd49af819dafd945daf3b7c8025937ad11f144c18489e3b31b2330a7377f2809c9c54070

    • SSDEEP

      6144:q7YmCW3NntZfHhKnARLebLEkAKqyMt5+lFNtLYe5vUeC0jPBn2KwTE0n0Yq0:q7YvWtp4EqLEAikFNxYocajBnAwGq0

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks