Overview

overview

10

Static

static

3

60d80082e4...18.exe

windows7-x64

10

60d80082e4...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    60d80082e4e486183245afb0fb7d8cc0_JaffaCakes118

  • Size

    412KB

  • Sample

    240721-whz2kazemm

  • MD5

    60d80082e4e486183245afb0fb7d8cc0

  • SHA1

    fbbe05c16b830f2ef9f5b8a28dc6364e722df98c

  • SHA256

    3297f1821e9fdb5ebc2b48f42ca60f48a84f67bf2d160e60770192d78e9d9f80

  • SHA512

    ebff4af3456b59b4a4ea69b3e3d4f22ad8d0ab2c8111b3470fdedc10e7be066674890d92beee5cc89aefbde532566ef745c9673b70bb0a5e88cfb04d8864fdf0

  • SSDEEP

    6144:WXzZy2fUYcWuoc5+ENEkbQPDDYNiCHGFRoHnzaJH3YjxtTJCEP:WXzRUEd0Q7cQCmYwWxt1

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      60d80082e4e486183245afb0fb7d8cc0_JaffaCakes118

    • Size

      412KB

    • MD5

      60d80082e4e486183245afb0fb7d8cc0

    • SHA1

      fbbe05c16b830f2ef9f5b8a28dc6364e722df98c

    • SHA256

      3297f1821e9fdb5ebc2b48f42ca60f48a84f67bf2d160e60770192d78e9d9f80

    • SHA512

      ebff4af3456b59b4a4ea69b3e3d4f22ad8d0ab2c8111b3470fdedc10e7be066674890d92beee5cc89aefbde532566ef745c9673b70bb0a5e88cfb04d8864fdf0

    • SSDEEP

      6144:WXzZy2fUYcWuoc5+ENEkbQPDDYNiCHGFRoHnzaJH3YjxtTJCEP:WXzRUEd0Q7cQCmYwWxt1

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks