Overview

overview

10

Static

static

3

18c0ff6c94...18.exe

windows7-x64

10

18c0ff6c94...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    18c0ff6c94baca9e7d10a7deb733167a_JaffaCakes118

  • Size

    342KB

  • Sample

    240628-eyfjestdjn

  • MD5

    18c0ff6c94baca9e7d10a7deb733167a

  • SHA1

    0aa9111af615b32dc2064590ba083271353b07f9

  • SHA256

    0d6204fc9ab9e1f9a464080ed45a14e4c36cb04d6623f46dca9a9590463c16cb

  • SHA512

    fed9cd5b20957d78eb5d22d42e755731f6c9e67390f82901f263545f37bdd78daa6f35fdd6a3c78e24e1426509760c354315496b953db2304e6ca2369f2f5717

  • SSDEEP

    6144:Ag0N/tfLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/fzdx:dAFhgh2R8O+yFqpLh+zdx

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      18c0ff6c94baca9e7d10a7deb733167a_JaffaCakes118

    • Size

      342KB

    • MD5

      18c0ff6c94baca9e7d10a7deb733167a

    • SHA1

      0aa9111af615b32dc2064590ba083271353b07f9

    • SHA256

      0d6204fc9ab9e1f9a464080ed45a14e4c36cb04d6623f46dca9a9590463c16cb

    • SHA512

      fed9cd5b20957d78eb5d22d42e755731f6c9e67390f82901f263545f37bdd78daa6f35fdd6a3c78e24e1426509760c354315496b953db2304e6ca2369f2f5717

    • SSDEEP

      6144:Ag0N/tfLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/fzdx:dAFhgh2R8O+yFqpLh+zdx

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks