Overview

overview

10

Static

static

3

1ab31704f0...18.exe

windows7-x64

10

1ab31704f0...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ab31704f01699670e439e618cdde349_JaffaCakes118

  • Size

    384KB

  • Sample

    240701-kz851ssfnh

  • MD5

    1ab31704f01699670e439e618cdde349

  • SHA1

    903f2ddddafbf30f885dae508ef113734a60d86b

  • SHA256

    a16197ecf09838234ca710f2cfeab85b0d54aa8d27a98ebed715ba31fc651f10

  • SHA512

    71a17b210508a17ef026173642bb132fb48decd1b8ada4a3bb93c6e2f942c38fbf12257937fad77923ca5a0b12dcfe7913f44ccb05717139e08f98f890102c1a

  • SSDEEP

    6144:6NtLZRv55G5ke9MRs0On1SIFs7Bqwtj9kJ8c0IITjZ0N7/cYL9duz4hwOUu808OG:8zR5GdCs0O1BkBqwtjFc0fTjZOT59oz7

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      1ab31704f01699670e439e618cdde349_JaffaCakes118

    • Size

      384KB

    • MD5

      1ab31704f01699670e439e618cdde349

    • SHA1

      903f2ddddafbf30f885dae508ef113734a60d86b

    • SHA256

      a16197ecf09838234ca710f2cfeab85b0d54aa8d27a98ebed715ba31fc651f10

    • SHA512

      71a17b210508a17ef026173642bb132fb48decd1b8ada4a3bb93c6e2f942c38fbf12257937fad77923ca5a0b12dcfe7913f44ccb05717139e08f98f890102c1a

    • SSDEEP

      6144:6NtLZRv55G5ke9MRs0On1SIFs7Bqwtj9kJ8c0IITjZ0N7/cYL9duz4hwOUu808OG:8zR5GdCs0O1BkBqwtjFc0fTjZOT59oz7

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks