Overview

overview

10

Static

static

3

372d2184bf...18.exe

windows7-x64

10

372d2184bf...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    372d2184bf0cbfb4abc71dc6586e6375_JaffaCakes118

  • Size

    468KB

  • Sample

    240711-bqtjjatbkh

  • MD5

    372d2184bf0cbfb4abc71dc6586e6375

  • SHA1

    1827cf0341cae549bce0e6af7e2f864a34c6158e

  • SHA256

    0337ae717092ba03d0b8fbc805c26f9a6527c644b91659046955cd3c2ace51e5

  • SHA512

    05c692058f5a33ef8394e4f32b9ddc0c6fe0741b55914917e2db1f0176a18cbce8751494fd66c130ba6dfa77ecc119fa159cf746ea5629d8e58d3acdeb9323a8

  • SSDEEP

    6144:guKHE1+Eh3Sz82lh6uTBQXiLq9B/EZkBzNidM5CLs0tR/QjnEdols/eWEMB:gV8jSz81u1QXn2ZiUe5ClR/QjnESFx

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      372d2184bf0cbfb4abc71dc6586e6375_JaffaCakes118

    • Size

      468KB

    • MD5

      372d2184bf0cbfb4abc71dc6586e6375

    • SHA1

      1827cf0341cae549bce0e6af7e2f864a34c6158e

    • SHA256

      0337ae717092ba03d0b8fbc805c26f9a6527c644b91659046955cd3c2ace51e5

    • SHA512

      05c692058f5a33ef8394e4f32b9ddc0c6fe0741b55914917e2db1f0176a18cbce8751494fd66c130ba6dfa77ecc119fa159cf746ea5629d8e58d3acdeb9323a8

    • SSDEEP

      6144:guKHE1+Eh3Sz82lh6uTBQXiLq9B/EZkBzNidM5CLs0tR/QjnEdols/eWEMB:gV8jSz81u1QXn2ZiUe5ClR/QjnESFx

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks