Overview

overview

10

Static

static

3

613de0fd3a...18.exe

windows7-x64

10

613de0fd3a...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    613de0fd3a2a7858307d79783da97821_JaffaCakes118

  • Size

    468KB

  • Sample

    240721-y1lb8svelq

  • MD5

    613de0fd3a2a7858307d79783da97821

  • SHA1

    8588fd5803ed742d40e99d17022e53103ac05c7d

  • SHA256

    fd985c806a41299343102d05fc4000c18fc3b40727dc99a0e7ba94ba0d1120e6

  • SHA512

    da4e620745585b943711e9d552e6403439781b494a0381cf586b1bef21bce734c2ae0f84e8ee41c67a51a95e2cc670f49346dfc3a224d8279fda323898e145a2

  • SSDEEP

    6144:suKH9qpdMH/901Hpr/5x+UrtsRROuun0OttReLKQoPCng8sUXFOwhbWapZ+fi:sVMgf90br/dRs3puTtTeLZnhVxWMZE

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      613de0fd3a2a7858307d79783da97821_JaffaCakes118

    • Size

      468KB

    • MD5

      613de0fd3a2a7858307d79783da97821

    • SHA1

      8588fd5803ed742d40e99d17022e53103ac05c7d

    • SHA256

      fd985c806a41299343102d05fc4000c18fc3b40727dc99a0e7ba94ba0d1120e6

    • SHA512

      da4e620745585b943711e9d552e6403439781b494a0381cf586b1bef21bce734c2ae0f84e8ee41c67a51a95e2cc670f49346dfc3a224d8279fda323898e145a2

    • SSDEEP

      6144:suKH9qpdMH/901Hpr/5x+UrtsRROuun0OttReLKQoPCng8sUXFOwhbWapZ+fi:sVMgf90br/dRs3puTtTeLZnhVxWMZE

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks