Overview

overview

10

Static

static

3

608a164f31...18.exe

windows7-x64

10

608a164f31...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    608a164f310812feab0ee6c4a5a08e66_JaffaCakes118

  • Size

    456KB

  • Sample

    240721-pcs8hazfna

  • MD5

    608a164f310812feab0ee6c4a5a08e66

  • SHA1

    0a26834d2484a86993d95089bcf7be71f06db0bb

  • SHA256

    b0dac5cfe892a569023c73835c8416ec95e509d7d3a56e91db6aebcb57d71800

  • SHA512

    2215cafecce8cccc36d3a4a5868cd77ba260957998cc190e9fef7cdf9f97c7a4703a0d302a0a0789a9cbcd7dd07c32b80516f29775e0a16df7338cba69b0f03c

  • SSDEEP

    6144:pjmYs8BON6ekCAdQtW7CJBBSmeTdkPwyOMfjsjwRrzuO:pS8I6bCi1CckIyOMfjs0

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      608a164f310812feab0ee6c4a5a08e66_JaffaCakes118

    • Size

      456KB

    • MD5

      608a164f310812feab0ee6c4a5a08e66

    • SHA1

      0a26834d2484a86993d95089bcf7be71f06db0bb

    • SHA256

      b0dac5cfe892a569023c73835c8416ec95e509d7d3a56e91db6aebcb57d71800

    • SHA512

      2215cafecce8cccc36d3a4a5868cd77ba260957998cc190e9fef7cdf9f97c7a4703a0d302a0a0789a9cbcd7dd07c32b80516f29775e0a16df7338cba69b0f03c

    • SSDEEP

      6144:pjmYs8BON6ekCAdQtW7CJBBSmeTdkPwyOMfjsjwRrzuO:pS8I6bCi1CckIyOMfjs0

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks