Overview

overview

10

Static

static

3

0e61f849d7...18.exe

windows7-x64

10

0e61f849d7...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e61f849d74040ff16dfe6440f9e25ba_JaffaCakes118

  • Size

    393KB

  • Sample

    240625-rk9assvckg

  • MD5

    0e61f849d74040ff16dfe6440f9e25ba

  • SHA1

    a3d5732a70729d10bf41395c31d84eca3dd75bec

  • SHA256

    424137f0975fcb934280e5c2e3e3afb4f2040eb17593d88de4ea99365dca88cb

  • SHA512

    4c22b8afae8a12a289963993c4f1028d1508347b4bae6c2a36c1e04c4a8cb6e5c27330488a257e2aa8bde58e8c609f5c248657d70d85a0a5f5ace2ce220ce4dc

  • SSDEEP

    6144:PHGwPfMXE8RBlYmP4I99mGJKko33SURApteIR0BhOyC4K6/U8a0fFvG:Vv8RBmmgbGMF33SU+tDRqhG6/U8aKFu

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      0e61f849d74040ff16dfe6440f9e25ba_JaffaCakes118

    • Size

      393KB

    • MD5

      0e61f849d74040ff16dfe6440f9e25ba

    • SHA1

      a3d5732a70729d10bf41395c31d84eca3dd75bec

    • SHA256

      424137f0975fcb934280e5c2e3e3afb4f2040eb17593d88de4ea99365dca88cb

    • SHA512

      4c22b8afae8a12a289963993c4f1028d1508347b4bae6c2a36c1e04c4a8cb6e5c27330488a257e2aa8bde58e8c609f5c248657d70d85a0a5f5ace2ce220ce4dc

    • SSDEEP

      6144:PHGwPfMXE8RBlYmP4I99mGJKko33SURApteIR0BhOyC4K6/U8a0fFvG:Vv8RBmmgbGMF33SU+tDRqhG6/U8aKFu

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks