Overview

overview

10

Static

static

3

0f76496ed3...18.exe

windows7-x64

10

0f76496ed3...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f76496ed3b409b83e60754b0f632bb2_JaffaCakes118

  • Size

    416KB

  • Sample

    240625-zhs5sssana

  • MD5

    0f76496ed3b409b83e60754b0f632bb2

  • SHA1

    46062e78292524f6e4ebd3598333a5af9e559b99

  • SHA256

    6f88a666cc8e4891ecc6a91647ee0ff2a90d308dee978d1dca3ec992e1f4d363

  • SHA512

    5df3c312afd4fee3f8deabec595f778925ecb745090d09bfa0eabeceee1b7b7a0d047e207ab7c9a6f946740fa71be4615357d9224f0c23349cd3ed4a6e0b7d5f

  • SSDEEP

    6144:y8BL683B3J3GZY8S4raGBR56dnYmh4uzPoYM0yznsh0H9bpdDHvbmHvEjR1B:y8BVB3UHPwAYnepb/DHzmHcj

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      0f76496ed3b409b83e60754b0f632bb2_JaffaCakes118

    • Size

      416KB

    • MD5

      0f76496ed3b409b83e60754b0f632bb2

    • SHA1

      46062e78292524f6e4ebd3598333a5af9e559b99

    • SHA256

      6f88a666cc8e4891ecc6a91647ee0ff2a90d308dee978d1dca3ec992e1f4d363

    • SHA512

      5df3c312afd4fee3f8deabec595f778925ecb745090d09bfa0eabeceee1b7b7a0d047e207ab7c9a6f946740fa71be4615357d9224f0c23349cd3ed4a6e0b7d5f

    • SSDEEP

      6144:y8BL683B3J3GZY8S4raGBR56dnYmh4uzPoYM0yznsh0H9bpdDHvbmHvEjR1B:y8BVB3UHPwAYnepb/DHzmHcj

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks