Overview

overview

10

Static

static

3

5f44f0e4a4...18.exe

windows7-x64

10

5f44f0e4a4...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5f44f0e4a4b9680ca8f8fc6f57296356_JaffaCakes118

  • Size

    416KB

  • Sample

    240720-gkp7taygkk

  • MD5

    5f44f0e4a4b9680ca8f8fc6f57296356

  • SHA1

    1b1a60857f8c9f313869715f1662a9a088edca17

  • SHA256

    d852a4e33e89e0d1e2e153cc3668aa8f5c330c62d9b5fa44c8654721601dcadf

  • SHA512

    7c62667e195507035bc847e1dd6febe8b4364a99b427dbc68ed8abde5e9378e2f044cfad60ffd81f6a26c6c98fe2606fb7faae34a051cfee34276781bd8f79a5

  • SSDEEP

    12288:qn9+MdqgNXkNkVhkkuK2Qtm98oQ8wUDXVzwl:eXxCkPz2EG8opHlw

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      5f44f0e4a4b9680ca8f8fc6f57296356_JaffaCakes118

    • Size

      416KB

    • MD5

      5f44f0e4a4b9680ca8f8fc6f57296356

    • SHA1

      1b1a60857f8c9f313869715f1662a9a088edca17

    • SHA256

      d852a4e33e89e0d1e2e153cc3668aa8f5c330c62d9b5fa44c8654721601dcadf

    • SHA512

      7c62667e195507035bc847e1dd6febe8b4364a99b427dbc68ed8abde5e9378e2f044cfad60ffd81f6a26c6c98fe2606fb7faae34a051cfee34276781bd8f79a5

    • SSDEEP

      12288:qn9+MdqgNXkNkVhkkuK2Qtm98oQ8wUDXVzwl:eXxCkPz2EG8opHlw

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks