Overview

overview

10

Static

static

3

629d30381f...18.exe

windows7-x64

10

629d30381f...18.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    629d30381f4e87a9316b0c3ffaeedd36_JaffaCakes118

  • Size

    436KB

  • Sample

    240722-kzj6wszbrp

  • MD5

    629d30381f4e87a9316b0c3ffaeedd36

  • SHA1

    99d26f7c3ab70ed2c26c73e2620a6a829997917d

  • SHA256

    23ba01385f8c99d9030ee407d7d1f39edbe1b5e09e48d4d8f78d07609d39e2ed

  • SHA512

    084bb421ef81484b0e43a237406fdc46dbe94f23f4f284a0bd7d264be14faf80149250720fed36a345569b6409ae317b6ed48698e0cce9b00e66aed123eba67f

  • SSDEEP

    12288:stklI9Ym2EXV5uRo4CiNsBOI+kDuJHdKt:wMI9qYDY0OI+kDuJo

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      629d30381f4e87a9316b0c3ffaeedd36_JaffaCakes118

    • Size

      436KB

    • MD5

      629d30381f4e87a9316b0c3ffaeedd36

    • SHA1

      99d26f7c3ab70ed2c26c73e2620a6a829997917d

    • SHA256

      23ba01385f8c99d9030ee407d7d1f39edbe1b5e09e48d4d8f78d07609d39e2ed

    • SHA512

      084bb421ef81484b0e43a237406fdc46dbe94f23f4f284a0bd7d264be14faf80149250720fed36a345569b6409ae317b6ed48698e0cce9b00e66aed123eba67f

    • SSDEEP

      12288:stklI9Ym2EXV5uRo4CiNsBOI+kDuJHdKt:wMI9qYDY0OI+kDuJo

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks