Overview

overview

10

Static

static

3

14f4273a49...18.exe

windows7-x64

10

14f4273a49...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14f4273a4958c1277ac3059fabde33d8_JaffaCakes118

  • Size

    416KB

  • Sample

    240627-gyxttawcnb

  • MD5

    14f4273a4958c1277ac3059fabde33d8

  • SHA1

    e3ecf90b209c66c72d95f6bc81c1de6137f240ec

  • SHA256

    caeccc412bc469c2c0b140b3c3f41fc23c5f4e56fe1dc0628215a18853d24f40

  • SHA512

    218ff7f2bcfadbcb06a1346f75ddc61f5f1c762ca1ddc6693335dd57bc87d8302310fe7d51caa283c091f27f99d54a24e8d5bf2475d201fc78b0d4e73535bb1e

  • SSDEEP

    6144:CEIZDAEE+Y5sesv1oD8TSiBbInCJViWjLhO1yI5NqhJYwW+TIVO5d6zVgS3VC0qZ:CTD5YKesvdBbCCJViWjOV5Ny0h3VJW3

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      14f4273a4958c1277ac3059fabde33d8_JaffaCakes118

    • Size

      416KB

    • MD5

      14f4273a4958c1277ac3059fabde33d8

    • SHA1

      e3ecf90b209c66c72d95f6bc81c1de6137f240ec

    • SHA256

      caeccc412bc469c2c0b140b3c3f41fc23c5f4e56fe1dc0628215a18853d24f40

    • SHA512

      218ff7f2bcfadbcb06a1346f75ddc61f5f1c762ca1ddc6693335dd57bc87d8302310fe7d51caa283c091f27f99d54a24e8d5bf2475d201fc78b0d4e73535bb1e

    • SSDEEP

      6144:CEIZDAEE+Y5sesv1oD8TSiBbInCJViWjLhO1yI5NqhJYwW+TIVO5d6zVgS3VC0qZ:CTD5YKesvdBbCCJViWjOV5Ny0h3VJW3

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks