Overview

overview

10

Static

static

3

2f0f64b06d...18.exe

windows7-x64

10

2f0f64b06d...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f0f64b06dbea4becffa1eb4a69f35a2_JaffaCakes118

  • Size

    388KB

  • Sample

    240709-fl9geaxckq

  • MD5

    2f0f64b06dbea4becffa1eb4a69f35a2

  • SHA1

    07df80dafcd55ac329b67c5fdb2c3e0c2fe3052b

  • SHA256

    3703a9bf320618f9c91728bfb1c77dd6c4b4260ed90628c1cdcf025b3f12e462

  • SHA512

    266fee0d6e3836cf73da92d26d7c65f55ce581a0742fd5b94d8c133b65d7ad2f3a71c916ce6e11ddb4f251d0cc7c9ad0522dd6a667131ff62d11c045d9b28b01

  • SSDEEP

    6144:z9Nwa3x7HcrakmAmy8q6USzLjMXJV7ULXvMGelgYUcDtfb+iIj7mRwU4i:z9Np7H65BX6Jov4DvAUcViiIjaRwU1

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      2f0f64b06dbea4becffa1eb4a69f35a2_JaffaCakes118

    • Size

      388KB

    • MD5

      2f0f64b06dbea4becffa1eb4a69f35a2

    • SHA1

      07df80dafcd55ac329b67c5fdb2c3e0c2fe3052b

    • SHA256

      3703a9bf320618f9c91728bfb1c77dd6c4b4260ed90628c1cdcf025b3f12e462

    • SHA512

      266fee0d6e3836cf73da92d26d7c65f55ce581a0742fd5b94d8c133b65d7ad2f3a71c916ce6e11ddb4f251d0cc7c9ad0522dd6a667131ff62d11c045d9b28b01

    • SSDEEP

      6144:z9Nwa3x7HcrakmAmy8q6USzLjMXJV7ULXvMGelgYUcDtfb+iIj7mRwU4i:z9Np7H65BX6Jov4DvAUcViiIjaRwU1

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks