Overview

overview

10

Static

static

3

5ecad69f8a...18.exe

windows7-x64

10

5ecad69f8a...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    5ecad69f8a4bf857ef51fd09fe613d8e_JaffaCakes118

  • Size

    408KB

  • Sample

    240720-dkybmsxbmh

  • MD5

    5ecad69f8a4bf857ef51fd09fe613d8e

  • SHA1

    ed352174ae235fcc4191481058c979f2fe91e5b9

  • SHA256

    ff2218dc55225241b9de6585e25d03a2f59d8c1a2cc5771f79f3787722106a68

  • SHA512

    9e050f95285990aa5c01a194568654badeff3ba6f35854a5e3436bf5184ae70976d8b31c60ebd1ea1d2be599b21ceb14741135c52b71663cff95e801e01be450

  • SSDEEP

    12288:jq4QShw323n5cM1NtNz6hKlTwiJa2G9pMN:KS5TXNgAwiHG9pMN

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      5ecad69f8a4bf857ef51fd09fe613d8e_JaffaCakes118

    • Size

      408KB

    • MD5

      5ecad69f8a4bf857ef51fd09fe613d8e

    • SHA1

      ed352174ae235fcc4191481058c979f2fe91e5b9

    • SHA256

      ff2218dc55225241b9de6585e25d03a2f59d8c1a2cc5771f79f3787722106a68

    • SHA512

      9e050f95285990aa5c01a194568654badeff3ba6f35854a5e3436bf5184ae70976d8b31c60ebd1ea1d2be599b21ceb14741135c52b71663cff95e801e01be450

    • SSDEEP

      12288:jq4QShw323n5cM1NtNz6hKlTwiJa2G9pMN:KS5TXNgAwiHG9pMN

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks