Overview

overview

10

Static

static

3

27e6391fd3...18.exe

windows7-x64

10

27e6391fd3...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27e6391fd3138c0c4031c35d5c809bd4_JaffaCakes118

  • Size

    392KB

  • Sample

    240706-kc4a9avdme

  • MD5

    27e6391fd3138c0c4031c35d5c809bd4

  • SHA1

    867e46d37e8f1bff7fc3c5583834b42e87fe0566

  • SHA256

    8287e3353bd7c0a747be8e50491628394a2a25b17a93d09de8dff24cc406439f

  • SHA512

    ee4ab95dd49a2de4a6c77a1f915c4988ca1c6484fb5757fc1f11889db0e325019409693f034397acfef3b701b87b855589ad7b5eb05229954000ba8bb47b7dde

  • SSDEEP

    6144:X+FxAgek1C3EpduJFYRjTuaJfrv/0wEfYC9TbyrMiMDeEic2U9uKZEWFH7:uFe6CFkZZVryf9RlDLiPUwKJb

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      27e6391fd3138c0c4031c35d5c809bd4_JaffaCakes118

    • Size

      392KB

    • MD5

      27e6391fd3138c0c4031c35d5c809bd4

    • SHA1

      867e46d37e8f1bff7fc3c5583834b42e87fe0566

    • SHA256

      8287e3353bd7c0a747be8e50491628394a2a25b17a93d09de8dff24cc406439f

    • SHA512

      ee4ab95dd49a2de4a6c77a1f915c4988ca1c6484fb5757fc1f11889db0e325019409693f034397acfef3b701b87b855589ad7b5eb05229954000ba8bb47b7dde

    • SSDEEP

      6144:X+FxAgek1C3EpduJFYRjTuaJfrv/0wEfYC9TbyrMiMDeEic2U9uKZEWFH7:uFe6CFkZZVryf9RlDLiPUwKJb

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks