Overview

overview

10

Static

static

3

3c80af6c77...18.exe

windows7-x64

10

3c80af6c77...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c80af6c7749d2f2f4f13a12511d467d_JaffaCakes118

  • Size

    393KB

  • Sample

    240712-jf858stgqn

  • MD5

    3c80af6c7749d2f2f4f13a12511d467d

  • SHA1

    eb2d5efcdbcaff583f5b7eefee66e6bd1fe6cf7b

  • SHA256

    9c83b64b3239570bd4ee564d214c609596aed3558941f88639488098a27b050e

  • SHA512

    70a9f09ca9a4825618718005996e4b53dd7ac657215824e858a34e772a42cd2369c399f99cfec8696cc2ef8fe41d878c734f88db62a7e4a994fe0df63e73912f

  • SSDEEP

    6144:DsVEo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnBCLQW:DZQnhxUUSbuGFehOsuC8XmklbBCLD

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      3c80af6c7749d2f2f4f13a12511d467d_JaffaCakes118

    • Size

      393KB

    • MD5

      3c80af6c7749d2f2f4f13a12511d467d

    • SHA1

      eb2d5efcdbcaff583f5b7eefee66e6bd1fe6cf7b

    • SHA256

      9c83b64b3239570bd4ee564d214c609596aed3558941f88639488098a27b050e

    • SHA512

      70a9f09ca9a4825618718005996e4b53dd7ac657215824e858a34e772a42cd2369c399f99cfec8696cc2ef8fe41d878c734f88db62a7e4a994fe0df63e73912f

    • SSDEEP

      6144:DsVEo5nhxlGFWPgynsiNYBoGFFYhaRRXcuCiX++Vzrmkqmu5jbmdVnBCLQW:DZQnhxUUSbuGFehOsuC8XmklbBCLD

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks