Overview

overview

10

Static

static

3

59e42766ac...18.exe

windows7-x64

10

59e42766ac...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    59e42766acfdb4bcd1e44698cf259a61_JaffaCakes118

  • Size

    400KB

  • Sample

    240719-br5cesyhje

  • MD5

    59e42766acfdb4bcd1e44698cf259a61

  • SHA1

    ae60ee8e23a95efa03f03903b6cc19ee21c14a4e

  • SHA256

    64ed464dc70992359bf44e61bc3098021ec0dc1efe21e255c0b41796636ba261

  • SHA512

    a42d1de75ed846e7bb65a7025b50cd462b7774cb418bcc8a2f4da0a84296778da2b5583d709e79d26bcca75d5f2fa258aa25e89fd15938cd9ad99d79954ba2bc

  • SSDEEP

    6144:umWJbPMiALVjWG8J/2d2hlIAMmSiidCsWkn0k3UsP6LSqOYVhDY:uTha5s24EiidmkdEsPoDv

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      59e42766acfdb4bcd1e44698cf259a61_JaffaCakes118

    • Size

      400KB

    • MD5

      59e42766acfdb4bcd1e44698cf259a61

    • SHA1

      ae60ee8e23a95efa03f03903b6cc19ee21c14a4e

    • SHA256

      64ed464dc70992359bf44e61bc3098021ec0dc1efe21e255c0b41796636ba261

    • SHA512

      a42d1de75ed846e7bb65a7025b50cd462b7774cb418bcc8a2f4da0a84296778da2b5583d709e79d26bcca75d5f2fa258aa25e89fd15938cd9ad99d79954ba2bc

    • SSDEEP

      6144:umWJbPMiALVjWG8J/2d2hlIAMmSiidCsWkn0k3UsP6LSqOYVhDY:uTha5s24EiidmkdEsPoDv

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks