Overview

overview

10

Static

static

3

1900ab6fb1...18.exe

windows7-x64

10

1900ab6fb1...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1900ab6fb13db94caa596b4735286543_JaffaCakes118

  • Size

    393KB

  • Sample

    240628-gf845awhql

  • MD5

    1900ab6fb13db94caa596b4735286543

  • SHA1

    d350d86343a82bf03580b3711f74ccc2587a094d

  • SHA256

    c50942aa8ac7143eec393290e59f065b4f986d297b57e818a97256fab7356428

  • SHA512

    275a210fe41a87b2b40219dbcab3da185f048ae668aee60d9247ed1305c0fe96f12ee3dd4fbce5e737e2b5995c1e2908d8336ccf75552754a70f4f6807a7db04

  • SSDEEP

    6144:Qxg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjM7924J:+g7dUmmLen1G6Lkjr7plWzuDRsVq17t

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      1900ab6fb13db94caa596b4735286543_JaffaCakes118

    • Size

      393KB

    • MD5

      1900ab6fb13db94caa596b4735286543

    • SHA1

      d350d86343a82bf03580b3711f74ccc2587a094d

    • SHA256

      c50942aa8ac7143eec393290e59f065b4f986d297b57e818a97256fab7356428

    • SHA512

      275a210fe41a87b2b40219dbcab3da185f048ae668aee60d9247ed1305c0fe96f12ee3dd4fbce5e737e2b5995c1e2908d8336ccf75552754a70f4f6807a7db04

    • SSDEEP

      6144:Qxg7dUShNmPhlen1GJw9B1uqY1dZHhptjYUxevM79lWzuDRsxyYZvy0TDjM7924J:+g7dUmmLen1G6Lkjr7plWzuDRsVq17t

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks