Overview

overview

10

Static

static

3

16bbd440c9...18.exe

windows7-x64

10

16bbd440c9...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    16bbd440c99fc7f15325dae6c004d324_JaffaCakes118

  • Size

    452KB

  • Sample

    240627-t8dvxasemr

  • MD5

    16bbd440c99fc7f15325dae6c004d324

  • SHA1

    85e7720ab423eefb48cb94c09f58af5dd3fd889d

  • SHA256

    3175712c21a3cc8d6e24a0d543d49e8771d5b35dbcc779fd743758c4943bb7ac

  • SHA512

    19a2c407886f62e757c741ea18c28a575754f4b42a4903b9eaa5a46f97f93b8ec37dfd5e9833df25acae59ca79187e676c45b10bd52dc3cab04d3d80213bf06f

  • SSDEEP

    12288:E3kOWmjL3nqFoPad7zFMrN4i32RP+Wlxp:mUOL3uoCd74PzW9

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      16bbd440c99fc7f15325dae6c004d324_JaffaCakes118

    • Size

      452KB

    • MD5

      16bbd440c99fc7f15325dae6c004d324

    • SHA1

      85e7720ab423eefb48cb94c09f58af5dd3fd889d

    • SHA256

      3175712c21a3cc8d6e24a0d543d49e8771d5b35dbcc779fd743758c4943bb7ac

    • SHA512

      19a2c407886f62e757c741ea18c28a575754f4b42a4903b9eaa5a46f97f93b8ec37dfd5e9833df25acae59ca79187e676c45b10bd52dc3cab04d3d80213bf06f

    • SSDEEP

      12288:E3kOWmjL3nqFoPad7zFMrN4i32RP+Wlxp:mUOL3uoCd74PzW9

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks