Overview

overview

10

Static

static

3

2e09a16c6f...18.exe

windows7-x64

10

2e09a16c6f...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e09a16c6fc50fe593538c3195233f33_JaffaCakes118

  • Size

    448KB

  • Sample

    240708-2bsxkavbjg

  • MD5

    2e09a16c6fc50fe593538c3195233f33

  • SHA1

    a9e3357272a3045b1d75108d850cd88c907d70cb

  • SHA256

    9cef8109ee47d6e1258f6d133ba1d634f2bb21f1406c661fd00164d48fc15e56

  • SHA512

    71ae1e450b945d5cadcc9e66a8ee5340d400f06c843422a458b0f1cb9c0f4933d0b6705ae7ec053db87d3e06ec5470305298536e472c1dfe64efcebabd983cfe

  • SSDEEP

    6144:uI/Jb4l8A7hVgqHh9qT9gn4hutO2JPa5rAUaUeFaEupYseERsgVfMO1v4lXtZZCD:uIB4lP0qBEJhtKa5PwkjZVmldCH9

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      2e09a16c6fc50fe593538c3195233f33_JaffaCakes118

    • Size

      448KB

    • MD5

      2e09a16c6fc50fe593538c3195233f33

    • SHA1

      a9e3357272a3045b1d75108d850cd88c907d70cb

    • SHA256

      9cef8109ee47d6e1258f6d133ba1d634f2bb21f1406c661fd00164d48fc15e56

    • SHA512

      71ae1e450b945d5cadcc9e66a8ee5340d400f06c843422a458b0f1cb9c0f4933d0b6705ae7ec053db87d3e06ec5470305298536e472c1dfe64efcebabd983cfe

    • SSDEEP

      6144:uI/Jb4l8A7hVgqHh9qT9gn4hutO2JPa5rAUaUeFaEupYseERsgVfMO1v4lXtZZCD:uIB4lP0qBEJhtKa5PwkjZVmldCH9

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks