Overview

overview

10

Static

static

3

08be9ae74b...18.exe

windows7-x64

10

08be9ae74b...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    08be9ae74b43071bf305983301c47784_JaffaCakes118

  • Size

    392KB

  • Sample

    240620-xbqd8awdll

  • MD5

    08be9ae74b43071bf305983301c47784

  • SHA1

    73b93d28aa1b1625ca993040c60ecb5dd5885026

  • SHA256

    e1372166f99525d89d0c5ea07d664537e558d4a3db29602f153d173e49b89b5c

  • SHA512

    6e86e38162e3cb042f7178dffe2dc31358d7643f2a2f7bbc5f8f44e7e9e3e58587f25faf0b1f613640f35a618cac423b06d50cb9ed02238a6ed57f1673aafff1

  • SSDEEP

    6144:KvDp+FxAgek1C3EpduJFYRjTuaJfrv/0wEfYC9TbyrMiMDeEic2U9uKZEW/Oz:0kFe6CFkZZVryf9RlDLiPUwKla

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      08be9ae74b43071bf305983301c47784_JaffaCakes118

    • Size

      392KB

    • MD5

      08be9ae74b43071bf305983301c47784

    • SHA1

      73b93d28aa1b1625ca993040c60ecb5dd5885026

    • SHA256

      e1372166f99525d89d0c5ea07d664537e558d4a3db29602f153d173e49b89b5c

    • SHA512

      6e86e38162e3cb042f7178dffe2dc31358d7643f2a2f7bbc5f8f44e7e9e3e58587f25faf0b1f613640f35a618cac423b06d50cb9ed02238a6ed57f1673aafff1

    • SSDEEP

      6144:KvDp+FxAgek1C3EpduJFYRjTuaJfrv/0wEfYC9TbyrMiMDeEic2U9uKZEW/Oz:0kFe6CFkZZVryf9RlDLiPUwKla

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks