Overview

overview

10

Static

static

3

0676fbc94d...18.exe

windows7-x64

10

0676fbc94d...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0676fbc94d7db80e446ec871bf5163e8_JaffaCakes118

  • Size

    468KB

  • Sample

    240620-qvdq7szfng

  • MD5

    0676fbc94d7db80e446ec871bf5163e8

  • SHA1

    60213fe783ce6a148d9a68ec846ca90d5b65313f

  • SHA256

    f42f491cc23cb2c05d2001887a4ec57118c5fbfbb421f36bcc56285060154293

  • SHA512

    0691db6f7be86325379a834222cc8a90bb007056cceaf9bf74fe9b22dce1a35a03b636a2638b4b32e2fcfb1c1bf777297c410a90e36e8fc1766e4a0f3efe3065

  • SSDEEP

    12288:LVdlPT//2mFDTWAIYkKkVeTwMiatl8hcx/:LlTn/DTUYaVFMiavx

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      0676fbc94d7db80e446ec871bf5163e8_JaffaCakes118

    • Size

      468KB

    • MD5

      0676fbc94d7db80e446ec871bf5163e8

    • SHA1

      60213fe783ce6a148d9a68ec846ca90d5b65313f

    • SHA256

      f42f491cc23cb2c05d2001887a4ec57118c5fbfbb421f36bcc56285060154293

    • SHA512

      0691db6f7be86325379a834222cc8a90bb007056cceaf9bf74fe9b22dce1a35a03b636a2638b4b32e2fcfb1c1bf777297c410a90e36e8fc1766e4a0f3efe3065

    • SSDEEP

      12288:LVdlPT//2mFDTWAIYkKkVeTwMiatl8hcx/:LlTn/DTUYaVFMiavx

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks