Overview

overview

10

Static

static

3

32675533e4...18.exe

windows7-x64

10

32675533e4...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    32675533e481fe16e06e87fa0adff5ae_JaffaCakes118

  • Size

    392KB

  • Sample

    240709-3ca9ksteqf

  • MD5

    32675533e481fe16e06e87fa0adff5ae

  • SHA1

    3527e8a796ae13b6eb83a2fdcab3894c7dea1035

  • SHA256

    d255d3fc62adcce2a08ed6fd088cb9e604fedfb8554b82ccc6a3495f28893abb

  • SHA512

    3ceb9345b6f93732dfa855720a84d29ce35428e78b7be6bfe3aea7105c9bf978a5ce13bc1172afb6871d34acf5d4397771965b5bee60f8847ed892556ee2cb7a

  • SSDEEP

    12288:K5RGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwHUr:K5RGGEdwORVb4iiX2tzGyG2o5

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      32675533e481fe16e06e87fa0adff5ae_JaffaCakes118

    • Size

      392KB

    • MD5

      32675533e481fe16e06e87fa0adff5ae

    • SHA1

      3527e8a796ae13b6eb83a2fdcab3894c7dea1035

    • SHA256

      d255d3fc62adcce2a08ed6fd088cb9e604fedfb8554b82ccc6a3495f28893abb

    • SHA512

      3ceb9345b6f93732dfa855720a84d29ce35428e78b7be6bfe3aea7105c9bf978a5ce13bc1172afb6871d34acf5d4397771965b5bee60f8847ed892556ee2cb7a

    • SSDEEP

      12288:K5RGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwHUr:K5RGGEdwORVb4iiX2tzGyG2o5

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks