Overview

overview

10

Static

static

3

4b34bcefac...18.exe

windows7-x64

10

4b34bcefac...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4b34bcefac7625c91e838e5d0c6a8e4f_JaffaCakes118

  • Size

    340KB

  • Sample

    240715-yvn6yaxarp

  • MD5

    4b34bcefac7625c91e838e5d0c6a8e4f

  • SHA1

    d58d6ebee2b9268a26e3bfc5747782ddc0359edf

  • SHA256

    6249a1af6e4004fd0de7d9f706a81c5bbad9c5c75b7086d52e99d86e95a01cae

  • SHA512

    5689d9a08f14b68e5c75c48b1aed86b8818d436324ea1e83eb3a319d3cc89340a5a03f2e48485ea5e8abd7f8e61b5f1956d68f39fc5f5858c27dab5b3c4a95a9

  • SSDEEP

    6144:NyCtyLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/RVNjraC:AFhgh2R8O+yFqpLh+bprP

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      4b34bcefac7625c91e838e5d0c6a8e4f_JaffaCakes118

    • Size

      340KB

    • MD5

      4b34bcefac7625c91e838e5d0c6a8e4f

    • SHA1

      d58d6ebee2b9268a26e3bfc5747782ddc0359edf

    • SHA256

      6249a1af6e4004fd0de7d9f706a81c5bbad9c5c75b7086d52e99d86e95a01cae

    • SHA512

      5689d9a08f14b68e5c75c48b1aed86b8818d436324ea1e83eb3a319d3cc89340a5a03f2e48485ea5e8abd7f8e61b5f1956d68f39fc5f5858c27dab5b3c4a95a9

    • SSDEEP

      6144:NyCtyLcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/RVNjraC:AFhgh2R8O+yFqpLh+bprP

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks