Overview

overview

10

Static

static

3

2e7d4060db...18.exe

windows7-x64

10

2e7d4060db...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e7d4060dba2c3bff79fe94266e808d0_JaffaCakes118

  • Size

    408KB

  • Sample

    240709-bkl79s1cma

  • MD5

    2e7d4060dba2c3bff79fe94266e808d0

  • SHA1

    e937d25fe8bc4addc2d8032cdacd653e95b14926

  • SHA256

    4ecc72175ddc0a72b987132631fd7fbe10c75e65e4e04986092d34682b1f8bed

  • SHA512

    837b035c5e256be3b2ef57ff43c4c3d12578da2f2019a5b1385393ed9e4906e5f5d4de7fdf3e9b4a5f669e89b2e1c4570884570cbf7018906338b55cf300099b

  • SSDEEP

    12288:dzWZfZR2PS+Zv/kZ6Pg6pKnna3/B68abqGb:dzWBZyZ0sP0na3w5eGb

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      2e7d4060dba2c3bff79fe94266e808d0_JaffaCakes118

    • Size

      408KB

    • MD5

      2e7d4060dba2c3bff79fe94266e808d0

    • SHA1

      e937d25fe8bc4addc2d8032cdacd653e95b14926

    • SHA256

      4ecc72175ddc0a72b987132631fd7fbe10c75e65e4e04986092d34682b1f8bed

    • SHA512

      837b035c5e256be3b2ef57ff43c4c3d12578da2f2019a5b1385393ed9e4906e5f5d4de7fdf3e9b4a5f669e89b2e1c4570884570cbf7018906338b55cf300099b

    • SSDEEP

      12288:dzWZfZR2PS+Zv/kZ6Pg6pKnna3/B68abqGb:dzWBZyZ0sP0na3w5eGb

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks