Overview

overview

10

Static

static

3

2da046951c...18.exe

windows7-x64

10

2da046951c...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2da046951c7a009f3ac503c2a2886e6a_JaffaCakes118

  • Size

    393KB

  • Sample

    240708-yn8a8sycmb

  • MD5

    2da046951c7a009f3ac503c2a2886e6a

  • SHA1

    833aa2d7555631aa1767e38cd6c5eca4ec033394

  • SHA256

    44ac8f020790b468e055b4c1a77295d2d2bcb1eb51a1c2f5ffba1559cd830254

  • SHA512

    552065df19390be220e8ed1bf8d57cc24f08db94b54081df4d44144db1d80a74e70a6626fcfefabea557b653aed80e1b70358dee893fee66cd85240c455fc428

  • SSDEEP

    6144:T8wPfMXE8RBlYmP4I99mGJKko33SURApteIR0BhOyC4K6/U8a0fFvG:jv8RBmmgbGMF33SU+tDRqhG6/U8aKFu

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      2da046951c7a009f3ac503c2a2886e6a_JaffaCakes118

    • Size

      393KB

    • MD5

      2da046951c7a009f3ac503c2a2886e6a

    • SHA1

      833aa2d7555631aa1767e38cd6c5eca4ec033394

    • SHA256

      44ac8f020790b468e055b4c1a77295d2d2bcb1eb51a1c2f5ffba1559cd830254

    • SHA512

      552065df19390be220e8ed1bf8d57cc24f08db94b54081df4d44144db1d80a74e70a6626fcfefabea557b653aed80e1b70358dee893fee66cd85240c455fc428

    • SSDEEP

      6144:T8wPfMXE8RBlYmP4I99mGJKko33SURApteIR0BhOyC4K6/U8a0fFvG:jv8RBmmgbGMF33SU+tDRqhG6/U8aKFu

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks