Overview

overview

10

Static

static

3

4dde03f00b...18.exe

windows7-x64

10

4dde03f00b...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4dde03f00b69dde098058e7d4aa76a34_JaffaCakes118

  • Size

    432KB

  • Sample

    240716-l9haqazgkd

  • MD5

    4dde03f00b69dde098058e7d4aa76a34

  • SHA1

    c382be59edb206167daf1b21a6819db8304d3a08

  • SHA256

    13548193087db0ecc38239ff87bf2423cebfed6455dda4be2c16f778566ea31f

  • SHA512

    a20f2bb6855a93f4019a29569883cc814667a165f875a68a186e519de0f0d00c116050241bdfcf41ca9f998e10bd9f2eaa97b225dab08e24ce3fffe155d362cf

  • SSDEEP

    12288:d+549afHWvvgwaT78DoAgIgSYUztSNVH3EBxr:dw49afHAvgtf8/PdSVXEB9

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      4dde03f00b69dde098058e7d4aa76a34_JaffaCakes118

    • Size

      432KB

    • MD5

      4dde03f00b69dde098058e7d4aa76a34

    • SHA1

      c382be59edb206167daf1b21a6819db8304d3a08

    • SHA256

      13548193087db0ecc38239ff87bf2423cebfed6455dda4be2c16f778566ea31f

    • SHA512

      a20f2bb6855a93f4019a29569883cc814667a165f875a68a186e519de0f0d00c116050241bdfcf41ca9f998e10bd9f2eaa97b225dab08e24ce3fffe155d362cf

    • SSDEEP

      12288:d+549afHWvvgwaT78DoAgIgSYUztSNVH3EBxr:dw49afHAvgtf8/PdSVXEB9

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks