Overview

overview

10

Static

static

3

440d9e81b3...18.exe

windows7-x64

10

440d9e81b3...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    440d9e81b37ebad0776508c71ec5a188_JaffaCakes118

  • Size

    392KB

  • Sample

    240714-dp5lhsvbjl

  • MD5

    440d9e81b37ebad0776508c71ec5a188

  • SHA1

    53c08a85eba7733f091a7fbb653d315e84bd25b0

  • SHA256

    f1f98f2bacefbdbc1abb7f62f00036b3e5da948f6e3ac099e2a99a345360beb7

  • SHA512

    748d5ba06cdeae86ff48fe7f2270002e0c0587f72196eaffbaccbfcbfb567726b3317c03999d108b6d426830c95499b0110b0c91f6749aa12e1c6b754ad40ba6

  • SSDEEP

    12288:GDXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:iR9eyWKwkJxruLUb

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      440d9e81b37ebad0776508c71ec5a188_JaffaCakes118

    • Size

      392KB

    • MD5

      440d9e81b37ebad0776508c71ec5a188

    • SHA1

      53c08a85eba7733f091a7fbb653d315e84bd25b0

    • SHA256

      f1f98f2bacefbdbc1abb7f62f00036b3e5da948f6e3ac099e2a99a345360beb7

    • SHA512

      748d5ba06cdeae86ff48fe7f2270002e0c0587f72196eaffbaccbfcbfb567726b3317c03999d108b6d426830c95499b0110b0c91f6749aa12e1c6b754ad40ba6

    • SSDEEP

      12288:GDXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:iR9eyWKwkJxruLUb

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks