Overview

overview

10

Static

static

3

15463ef1d1...18.exe

windows7-x64

10

15463ef1d1...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    15463ef1d129742826dc33616e526257_JaffaCakes118

  • Size

    360KB

  • Sample

    240627-j2zhxsshmm

  • MD5

    15463ef1d129742826dc33616e526257

  • SHA1

    dd0a52cd6e14b4386b7189f1030f2e2bf7d9e9dd

  • SHA256

    11aff20113514156457b6e4df44420be50871ab8682205f8a999ae034fc33a08

  • SHA512

    9c24ad139c8f697160d42c65bf62ff7baf79cd17b6e4da627fbb8a6a60307dc9c955d706a68657d79e4142039147f14407d66944a36e94a1c5c9f3d2f90013a4

  • SSDEEP

    6144:CjQ2cYW6OE8vZou8QXFdWHR/MMxJZG/va+:CjQf6X8vZou8mO2va+

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      15463ef1d129742826dc33616e526257_JaffaCakes118

    • Size

      360KB

    • MD5

      15463ef1d129742826dc33616e526257

    • SHA1

      dd0a52cd6e14b4386b7189f1030f2e2bf7d9e9dd

    • SHA256

      11aff20113514156457b6e4df44420be50871ab8682205f8a999ae034fc33a08

    • SHA512

      9c24ad139c8f697160d42c65bf62ff7baf79cd17b6e4da627fbb8a6a60307dc9c955d706a68657d79e4142039147f14407d66944a36e94a1c5c9f3d2f90013a4

    • SSDEEP

      6144:CjQ2cYW6OE8vZou8QXFdWHR/MMxJZG/va+:CjQf6X8vZou8mO2va+

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks