Overview

overview

10

Static

static

3

5c947ac34a...18.exe

windows7-x64

10

5c947ac34a...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c947ac34abdde9f12be23bcf737ba3c_JaffaCakes118

  • Size

    412KB

  • Sample

    240719-s5sdfsyblr

  • MD5

    5c947ac34abdde9f12be23bcf737ba3c

  • SHA1

    13cf079cbd0fc151b2c8f6b0dfee29eb0f43d92b

  • SHA256

    a9764ce28186c3bd4336e12975d0c26884a9944cfef137a7a1361d4c1ff07197

  • SHA512

    1ebf4c40ab8d3d1ce93c1bd386c7d1d0b61044940dd2d8ffab7e128d0a41c5a771967e3a8cdba8aa5664cef203e22c686d7fb4d625ccc9e0de3c6a36ab3c60c0

  • SSDEEP

    6144:209JUXji/VF9YZV/aMpQm/xB/tyl3F7m/ROXFj3ZvadiZwV22kE/222g:20HUXjy+VCL0+3F7GOXzaVk

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      5c947ac34abdde9f12be23bcf737ba3c_JaffaCakes118

    • Size

      412KB

    • MD5

      5c947ac34abdde9f12be23bcf737ba3c

    • SHA1

      13cf079cbd0fc151b2c8f6b0dfee29eb0f43d92b

    • SHA256

      a9764ce28186c3bd4336e12975d0c26884a9944cfef137a7a1361d4c1ff07197

    • SHA512

      1ebf4c40ab8d3d1ce93c1bd386c7d1d0b61044940dd2d8ffab7e128d0a41c5a771967e3a8cdba8aa5664cef203e22c686d7fb4d625ccc9e0de3c6a36ab3c60c0

    • SSDEEP

      6144:209JUXji/VF9YZV/aMpQm/xB/tyl3F7m/ROXFj3ZvadiZwV22kE/222g:20HUXjy+VCL0+3F7GOXzaVk

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks