Overview

overview

10

Static

static

3

3827491d81...18.exe

windows7-x64

10

3827491d81...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3827491d811fb8e97be41793d1d14916_JaffaCakes118

  • Size

    404KB

  • Sample

    240711-hxtansvdnm

  • MD5

    3827491d811fb8e97be41793d1d14916

  • SHA1

    b3c90bb85ff8dbd7a0ffecf4d03811db7d7bb904

  • SHA256

    4869dafb39c3a725dc60c42747a3e08499078d945f7cfc6e700fff41b2bbb53c

  • SHA512

    ebf74d31a0fc88e9c6b923e5899cb1dd9ac0bcacc6ac4e59c57e78b890f15ca3b8bd73a69540c9547da2cf08a186f2cf10ce5c6d0c5e1ec31d3cd9023d947ba3

  • SSDEEP

    6144:feFCiXX0ZkOiRQgTAuzjcNXx6C2mkism3YuXdZoFOSD1XdJhuvdo3gXaV69:feFP2kOiRQTDl+fD1N1g46

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      3827491d811fb8e97be41793d1d14916_JaffaCakes118

    • Size

      404KB

    • MD5

      3827491d811fb8e97be41793d1d14916

    • SHA1

      b3c90bb85ff8dbd7a0ffecf4d03811db7d7bb904

    • SHA256

      4869dafb39c3a725dc60c42747a3e08499078d945f7cfc6e700fff41b2bbb53c

    • SHA512

      ebf74d31a0fc88e9c6b923e5899cb1dd9ac0bcacc6ac4e59c57e78b890f15ca3b8bd73a69540c9547da2cf08a186f2cf10ce5c6d0c5e1ec31d3cd9023d947ba3

    • SSDEEP

      6144:feFCiXX0ZkOiRQgTAuzjcNXx6C2mkism3YuXdZoFOSD1XdJhuvdo3gXaV69:feFP2kOiRQTDl+fD1N1g46

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks