Overview

overview

10

Static

static

3

15f1f572af...18.exe

windows7-x64

10

15f1f572af...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15f1f572af4a3248c394614fbb399e3c_JaffaCakes118

  • Size

    393KB

  • Sample

    240627-pakhksshjn

  • MD5

    15f1f572af4a3248c394614fbb399e3c

  • SHA1

    09e6117bd30fcb0d18a78f000973bc5981132e86

  • SHA256

    3c726718575b364bb298f1936df218adb57c6122091f985a15109ed2a7de43eb

  • SHA512

    892291317afc1423e6f3e109a1bae0081e5ac5225ec74f32385ae67cf74254d51239def826aeda79ae267d22ab86a1ad9145a50e3c7d801d2b0335d80987be9b

  • SSDEEP

    12288:Zt3KpJI6xj1dV9fJcEXW4OYIb5IiENCav:ZtCb1dV9fJhXWGHN/

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      15f1f572af4a3248c394614fbb399e3c_JaffaCakes118

    • Size

      393KB

    • MD5

      15f1f572af4a3248c394614fbb399e3c

    • SHA1

      09e6117bd30fcb0d18a78f000973bc5981132e86

    • SHA256

      3c726718575b364bb298f1936df218adb57c6122091f985a15109ed2a7de43eb

    • SHA512

      892291317afc1423e6f3e109a1bae0081e5ac5225ec74f32385ae67cf74254d51239def826aeda79ae267d22ab86a1ad9145a50e3c7d801d2b0335d80987be9b

    • SSDEEP

      12288:Zt3KpJI6xj1dV9fJcEXW4OYIb5IiENCav:ZtCb1dV9fJhXWGHN/

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks