Overview

overview

10

Static

static

3

0c7f488c54...18.exe

windows7-x64

10

0c7f488c54...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c7f488c541161d0a0c907d664c44c41_JaffaCakes118

  • Size

    400KB

  • Sample

    240625-exr6tstcqn

  • MD5

    0c7f488c541161d0a0c907d664c44c41

  • SHA1

    a5619479bb1da75bd8eaeb641fbc1981f9202952

  • SHA256

    e9d198d5fec2f84786c95d0f108d31abd641cdbd0812982c12cb0b145b4ba1a2

  • SHA512

    60b77343593a140ebdfd10e1a7a8180d2e344c0e7ffbc4dcf68f00b4e3f5371e7a09d4144efe6fed9678fcf76fc944d82d61d19df530467ada067339a85b5c08

  • SSDEEP

    6144:dgrjuvSjs7jWG89nXQHH8ZvvnxKGebHk8bSZq5ytf1d1NkwIaGW2UEFdHyxsu:d9qSG8KvkGebHkkSZq5mf5NxIaG9dHb

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      0c7f488c541161d0a0c907d664c44c41_JaffaCakes118

    • Size

      400KB

    • MD5

      0c7f488c541161d0a0c907d664c44c41

    • SHA1

      a5619479bb1da75bd8eaeb641fbc1981f9202952

    • SHA256

      e9d198d5fec2f84786c95d0f108d31abd641cdbd0812982c12cb0b145b4ba1a2

    • SHA512

      60b77343593a140ebdfd10e1a7a8180d2e344c0e7ffbc4dcf68f00b4e3f5371e7a09d4144efe6fed9678fcf76fc944d82d61d19df530467ada067339a85b5c08

    • SSDEEP

      6144:dgrjuvSjs7jWG89nXQHH8ZvvnxKGebHk8bSZq5ytf1d1NkwIaGW2UEFdHyxsu:d9qSG8KvkGebHkkSZq5mf5NxIaG9dHb

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks