Overview

overview

7

Static

static

3

4b81bbecf4...18.exe

windows7-x64

7

4b81bbecf4...18.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    4b81bbecf4b1d2a7d5ea64e1ba8a86df_JaffaCakes118

  • Size

    58KB

  • Sample

    240715-1gerfsshkb

  • MD5

    4b81bbecf4b1d2a7d5ea64e1ba8a86df

  • SHA1

    ec5f1121666144686e9a66479639fecdf915539e

  • SHA256

    cdd8bbf9fbeb5cc7b395b73bfa5db8467b7cb6478d0d168b86e4492ba79f0f61

  • SHA512

    fb646c8bcfb9921eced357a3f84fc8a03b8b2534d724996921430594441def443e54fcfdc0ca2ad8f4594fff6b8dc002f47f97d47ae50b7f05dce5c36142d374

  • SSDEEP

    1536:4VRJvUD/EIrndB37OltiaPk19rXYLsoe4Gy+L8mIV/L/DM:2JI/EIzTClvPkLMQltLIzrDM

Score
7/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      4b81bbecf4b1d2a7d5ea64e1ba8a86df_JaffaCakes118

    • Size

      58KB

    • MD5

      4b81bbecf4b1d2a7d5ea64e1ba8a86df

    • SHA1

      ec5f1121666144686e9a66479639fecdf915539e

    • SHA256

      cdd8bbf9fbeb5cc7b395b73bfa5db8467b7cb6478d0d168b86e4492ba79f0f61

    • SHA512

      fb646c8bcfb9921eced357a3f84fc8a03b8b2534d724996921430594441def443e54fcfdc0ca2ad8f4594fff6b8dc002f47f97d47ae50b7f05dce5c36142d374

    • SSDEEP

      1536:4VRJvUD/EIrndB37OltiaPk19rXYLsoe4Gy+L8mIV/L/DM:2JI/EIzTClvPkLMQltLIzrDM

    Score
    7/10
    evasiontrojanpersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks