Overview

overview

10

Static

static

3

34a77c11dc...18.exe

windows7-x64

10

34a77c11dc...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    34a77c11dcda0c4e1499b23cb65010f5_JaffaCakes118

  • Size

    392KB

  • Sample

    240710-pa2f4axakq

  • MD5

    34a77c11dcda0c4e1499b23cb65010f5

  • SHA1

    53cfb145cb5f44ed8e2b9a1eec798cfeeecebdbd

  • SHA256

    d7c08606fd40d5dcbb2e6594bdaccec7bb2a0a0ae95259035e2e7c4ad4c77f4c

  • SHA512

    3c433c5dd43b0e0dd4bb4a210206c4b798ebbfc61f94b01a971426f3a108fbb8ed8130339d00447f1aca8db12cede612e6b377265238aab8fe79bd588060a96d

  • SSDEEP

    6144:w0hMUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3ddE3/:/vCJibvNYJbxYYgbRke6Dny/

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      34a77c11dcda0c4e1499b23cb65010f5_JaffaCakes118

    • Size

      392KB

    • MD5

      34a77c11dcda0c4e1499b23cb65010f5

    • SHA1

      53cfb145cb5f44ed8e2b9a1eec798cfeeecebdbd

    • SHA256

      d7c08606fd40d5dcbb2e6594bdaccec7bb2a0a0ae95259035e2e7c4ad4c77f4c

    • SHA512

      3c433c5dd43b0e0dd4bb4a210206c4b798ebbfc61f94b01a971426f3a108fbb8ed8130339d00447f1aca8db12cede612e6b377265238aab8fe79bd588060a96d

    • SSDEEP

      6144:w0hMUkqkFwzgVq767LkLbv1P/AxrvNCBeq0fG5bfAYSR6VbysZk1dWyRr3ddE3/:/vCJibvNYJbxYYgbRke6Dny/

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks