Overview

overview

10

Static

static

3

21b4dbf71d...18.exe

windows7-x64

10

21b4dbf71d...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    21b4dbf71d97e2a528ec53c3b9244b24_JaffaCakes118

  • Size

    408KB

  • Sample

    240703-kd568svckc

  • MD5

    21b4dbf71d97e2a528ec53c3b9244b24

  • SHA1

    211eecb97870039faa9ad15311ad32c38954a051

  • SHA256

    b140bfa1a65a1655dfcc5a25712587e26e4a350df4be9df5e4e78ecdaa9f0a2c

  • SHA512

    4da296fbf1efe40247214b9c95f02997e6bb041d128fcb19e00cb3e58df2bee1f1ad831ed6ae4780c9ec0c7928582c7fcc4f75f18c06e385a930dc931dc03a7f

  • SSDEEP

    12288:DSNqTbK3kSduid1IMHMqQKfHXtiE0AFAI:HTu3/dp1hMTKfHXV

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      21b4dbf71d97e2a528ec53c3b9244b24_JaffaCakes118

    • Size

      408KB

    • MD5

      21b4dbf71d97e2a528ec53c3b9244b24

    • SHA1

      211eecb97870039faa9ad15311ad32c38954a051

    • SHA256

      b140bfa1a65a1655dfcc5a25712587e26e4a350df4be9df5e4e78ecdaa9f0a2c

    • SHA512

      4da296fbf1efe40247214b9c95f02997e6bb041d128fcb19e00cb3e58df2bee1f1ad831ed6ae4780c9ec0c7928582c7fcc4f75f18c06e385a930dc931dc03a7f

    • SSDEEP

      12288:DSNqTbK3kSduid1IMHMqQKfHXtiE0AFAI:HTu3/dp1hMTKfHXV

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks