Overview

overview

10

Static

static

3

61fe008f33...18.exe

windows7-x64

10

61fe008f33...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    61fe008f339a888c07a5b4119340cb15_JaffaCakes118

  • Size

    392KB

  • Sample

    240722-agehks1hph

  • MD5

    61fe008f339a888c07a5b4119340cb15

  • SHA1

    2d45e1ae83d9460b0cbf071c74fee13715536255

  • SHA256

    6f1b3add09849511aedb7dd520999d897844f2ff657b3043d5fa5276ff2bed25

  • SHA512

    7a3cdc77eea5179c88a0ac02e6dfcfb8112ba0b1f88b69c360caae7d86f55a60bcd398e5c00c511e609a64bd982cb7707089c6ab8324d0f3565a22db1aba0e50

  • SSDEEP

    6144:H2wCi1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4hM1t:H2wCi/ApUvsfRh+ajZCBAMXoUK0VHx1t

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      61fe008f339a888c07a5b4119340cb15_JaffaCakes118

    • Size

      392KB

    • MD5

      61fe008f339a888c07a5b4119340cb15

    • SHA1

      2d45e1ae83d9460b0cbf071c74fee13715536255

    • SHA256

      6f1b3add09849511aedb7dd520999d897844f2ff657b3043d5fa5276ff2bed25

    • SHA512

      7a3cdc77eea5179c88a0ac02e6dfcfb8112ba0b1f88b69c360caae7d86f55a60bcd398e5c00c511e609a64bd982cb7707089c6ab8324d0f3565a22db1aba0e50

    • SSDEEP

      6144:H2wCi1wG0fljKQIZhzc7HVHtf5vuyh+ajZCsuAMXMzFHCD/yr07oAH4hM1t:H2wCi/ApUvsfRh+ajZCBAMXoUK0VHx1t

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks