Overview

overview

10

Static

static

3

28b5093968...18.exe

windows7-x64

10

28b5093968...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28b5093968cba15e13484165fe32f616_JaffaCakes118

  • Size

    375KB

  • Sample

    240706-s7ym9atcml

  • MD5

    28b5093968cba15e13484165fe32f616

  • SHA1

    bf69bf009bd1bb90faf85c01daae5be65b2f67a7

  • SHA256

    1b462982b00e47de204fce671e4cdd05e9e2a624f42b3dea17576c651499dd65

  • SHA512

    d2f12b98ebebe6ea8b0f1842d6e9f6cabedbbc68db69291edfcfb881c7058c86241f822d8e79c5a4c8d7b5fa91be26317060911428236675b4d5cf44c2414d8a

  • SSDEEP

    6144:FTYCrsZNUsNM/jjBFTufl5V/plnajd07/g7qvGyE8svfZXBUx6A1YjOlpxqg:F/snlM/jzTAV/3alqvU84xRXmY4

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      28b5093968cba15e13484165fe32f616_JaffaCakes118

    • Size

      375KB

    • MD5

      28b5093968cba15e13484165fe32f616

    • SHA1

      bf69bf009bd1bb90faf85c01daae5be65b2f67a7

    • SHA256

      1b462982b00e47de204fce671e4cdd05e9e2a624f42b3dea17576c651499dd65

    • SHA512

      d2f12b98ebebe6ea8b0f1842d6e9f6cabedbbc68db69291edfcfb881c7058c86241f822d8e79c5a4c8d7b5fa91be26317060911428236675b4d5cf44c2414d8a

    • SSDEEP

      6144:FTYCrsZNUsNM/jjBFTufl5V/plnajd07/g7qvGyE8svfZXBUx6A1YjOlpxqg:F/snlM/jzTAV/3alqvU84xRXmY4

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks