Overview

overview

10

Static

static

3

0a74c3f451...18.exe

windows7-x64

10

0a74c3f451...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a74c3f451ecdfbd81f0d51298230ab1_JaffaCakes118

  • Size

    400KB

  • Sample

    240624-ybwrnssdrm

  • MD5

    0a74c3f451ecdfbd81f0d51298230ab1

  • SHA1

    46e655c98c3f9e37959e382f99e00eb7a812fa74

  • SHA256

    8e0543458d2f694fad39327de77ec50285b17a490ee86f64aa68d2d3e9d44b18

  • SHA512

    d65c4289b3b7ef2af024515330b3cce8d1e18546203913441ce71a8efc06c80acdaf887de987b2c46f8c5b94e07eb8e25f804b5bf3471ef0df136e39af2f611d

  • SSDEEP

    6144:AXH+7T7iQjWG82go6073QnUZ5NrnuygVzmyfJZZaEek5oiiT0T8:KH+P+QViU3BuywmyfpaTjTi

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      0a74c3f451ecdfbd81f0d51298230ab1_JaffaCakes118

    • Size

      400KB

    • MD5

      0a74c3f451ecdfbd81f0d51298230ab1

    • SHA1

      46e655c98c3f9e37959e382f99e00eb7a812fa74

    • SHA256

      8e0543458d2f694fad39327de77ec50285b17a490ee86f64aa68d2d3e9d44b18

    • SHA512

      d65c4289b3b7ef2af024515330b3cce8d1e18546203913441ce71a8efc06c80acdaf887de987b2c46f8c5b94e07eb8e25f804b5bf3471ef0df136e39af2f611d

    • SSDEEP

      6144:AXH+7T7iQjWG82go6073QnUZ5NrnuygVzmyfJZZaEek5oiiT0T8:KH+P+QViU3BuywmyfpaTjTi

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks