Overview

overview

10

Static

static

3

29863f2b27...18.exe

windows7-x64

10

29863f2b27...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29863f2b2764bdfdd69706f4d7b0261a_JaffaCakes118

  • Size

    424KB

  • Sample

    240706-21pansybng

  • MD5

    29863f2b2764bdfdd69706f4d7b0261a

  • SHA1

    69783a8ee7de07ef31d861ed6f425fffaabc59ec

  • SHA256

    f5e5f81e9edb819e2e4f5e72b232cc6375c4ae00f31ebe6986a7c0c54b1c8e53

  • SHA512

    5069355fd9b741bb8505fb4f346b3baf8a72a8a60552e538da7179d2d5239ea5bb688a8cf3ac200f1e0dc1eef38fe44755341a323732385eebea24563d236dc4

  • SSDEEP

    12288:MWzGSygape4hx/vDcKVpNJmFRdhjhAWu9+9k:iSdABj/LcKkdhj

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      29863f2b2764bdfdd69706f4d7b0261a_JaffaCakes118

    • Size

      424KB

    • MD5

      29863f2b2764bdfdd69706f4d7b0261a

    • SHA1

      69783a8ee7de07ef31d861ed6f425fffaabc59ec

    • SHA256

      f5e5f81e9edb819e2e4f5e72b232cc6375c4ae00f31ebe6986a7c0c54b1c8e53

    • SHA512

      5069355fd9b741bb8505fb4f346b3baf8a72a8a60552e538da7179d2d5239ea5bb688a8cf3ac200f1e0dc1eef38fe44755341a323732385eebea24563d236dc4

    • SSDEEP

      12288:MWzGSygape4hx/vDcKVpNJmFRdhjhAWu9+9k:iSdABj/LcKkdhj

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks