Overview

overview

10

Static

static

3

41efa735a9...18.exe

windows7-x64

10

41efa735a9...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    41efa735a91c27ad4c58042ac370ac44_JaffaCakes118

  • Size

    404KB

  • Sample

    240713-q5bdtsvgmb

  • MD5

    41efa735a91c27ad4c58042ac370ac44

  • SHA1

    492afe36be774dadd0300d3268063360784a270c

  • SHA256

    7d212058eb6425f56fd83858dcac3a23d4872e4a961e90aa5f6ee6c0a5810a68

  • SHA512

    fd5cdfa0b0ee564d713294b2622b7b6b865f08cefe7828614982b55f5eb1af28c342f8c978ade4d6f2a8b33be8d23922c4468a69556adada0b66a7eef5f6664b

  • SSDEEP

    12288:74YW7V24uAw7J8VnLyQmZixmfZTfXjf2:8324u5GLyQm4GV

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      41efa735a91c27ad4c58042ac370ac44_JaffaCakes118

    • Size

      404KB

    • MD5

      41efa735a91c27ad4c58042ac370ac44

    • SHA1

      492afe36be774dadd0300d3268063360784a270c

    • SHA256

      7d212058eb6425f56fd83858dcac3a23d4872e4a961e90aa5f6ee6c0a5810a68

    • SHA512

      fd5cdfa0b0ee564d713294b2622b7b6b865f08cefe7828614982b55f5eb1af28c342f8c978ade4d6f2a8b33be8d23922c4468a69556adada0b66a7eef5f6664b

    • SSDEEP

      12288:74YW7V24uAw7J8VnLyQmZixmfZTfXjf2:8324u5GLyQm4GV

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks