Overview

overview

10

Static

static

3

06b21faf4e...18.exe

windows7-x64

10

06b21faf4e...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    06b21faf4e21d4117046622ab46bc146_JaffaCakes118

  • Size

    412KB

  • Sample

    240620-rgnjxs1gnc

  • MD5

    06b21faf4e21d4117046622ab46bc146

  • SHA1

    fe305bc7a785643ca04e1020d2a7a2af1ab37036

  • SHA256

    ab28bc4b0529f1d1671d0d02724a0d267030911638a8758408376311af179a67

  • SHA512

    4d015e60f5483522144942bb622a65cb12eade1524fab023d52ca1afa55cab93f06eb08b35d7ede83420cc24a6e3362cd1409a4276ad2460a6afd72163ca65ad

  • SSDEEP

    12288:I1AZ/3fUTA/YEywcSc6MgKyRYeCY/YGk:OAZ/M25wSczvyuybk

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      06b21faf4e21d4117046622ab46bc146_JaffaCakes118

    • Size

      412KB

    • MD5

      06b21faf4e21d4117046622ab46bc146

    • SHA1

      fe305bc7a785643ca04e1020d2a7a2af1ab37036

    • SHA256

      ab28bc4b0529f1d1671d0d02724a0d267030911638a8758408376311af179a67

    • SHA512

      4d015e60f5483522144942bb622a65cb12eade1524fab023d52ca1afa55cab93f06eb08b35d7ede83420cc24a6e3362cd1409a4276ad2460a6afd72163ca65ad

    • SSDEEP

      12288:I1AZ/3fUTA/YEywcSc6MgKyRYeCY/YGk:OAZ/M25wSczvyuybk

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks