Overview

overview

10

Static

static

3

2fba9376f1...18.exe

windows7-x64

10

2fba9376f1...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fba9376f1efd3f60dab237233a94ec1_JaffaCakes118

  • Size

    392KB

  • Sample

    240709-kwbeksybnh

  • MD5

    2fba9376f1efd3f60dab237233a94ec1

  • SHA1

    7ef0ca76855c9343cb37544278dda336e33c37b1

  • SHA256

    d5e91a46a28c079a3d26e235d39efe0fc70791210502de041e8961203d8a77f1

  • SHA512

    eaf0983834a3bd4f3b2ad489ad6a5e9e1943b95d5766013852424a3b1b752f497d3f936f934258314134f4e53ca6631fb116ba660b49f30e7d0987c9ecdfbb28

  • SSDEEP

    6144:Dq1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4PtF:Dq/ApUvsfRh+ajZCBAMXoUK0VH2

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      2fba9376f1efd3f60dab237233a94ec1_JaffaCakes118

    • Size

      392KB

    • MD5

      2fba9376f1efd3f60dab237233a94ec1

    • SHA1

      7ef0ca76855c9343cb37544278dda336e33c37b1

    • SHA256

      d5e91a46a28c079a3d26e235d39efe0fc70791210502de041e8961203d8a77f1

    • SHA512

      eaf0983834a3bd4f3b2ad489ad6a5e9e1943b95d5766013852424a3b1b752f497d3f936f934258314134f4e53ca6631fb116ba660b49f30e7d0987c9ecdfbb28

    • SSDEEP

      6144:Dq1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4PtF:Dq/ApUvsfRh+ajZCBAMXoUK0VH2

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks