Overview

overview

10

Static

static

3

63057e30b6...18.exe

windows7-x64

10

63057e30b6...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    63057e30b6eda5b619467d169ac54bfb_JaffaCakes118

  • Size

    460KB

  • Sample

    240722-nfbxysvcqc

  • MD5

    63057e30b6eda5b619467d169ac54bfb

  • SHA1

    49b5bf40e4d7c2bf0be78410e99c66faa1261528

  • SHA256

    17a9ca455a06dc8005a7b743c8db2e1d793919d6e2c16eac2d67db755c2b65ef

  • SHA512

    8e037115f32df89158aed16e780d276b341603612aad90537cc297aafb1be8eb344fbeccfeef8515effef4d3fabed70292de0202604ef1a57dd8b407c15a65c3

  • SSDEEP

    6144:KmVzoIUArpqbnjQu9SLBQGf++y1C7eTXngNx/Ih/KA32cu+jQyCR:KwHvponh9SLBq1Cqbng/ghyAGc3v

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      63057e30b6eda5b619467d169ac54bfb_JaffaCakes118

    • Size

      460KB

    • MD5

      63057e30b6eda5b619467d169ac54bfb

    • SHA1

      49b5bf40e4d7c2bf0be78410e99c66faa1261528

    • SHA256

      17a9ca455a06dc8005a7b743c8db2e1d793919d6e2c16eac2d67db755c2b65ef

    • SHA512

      8e037115f32df89158aed16e780d276b341603612aad90537cc297aafb1be8eb344fbeccfeef8515effef4d3fabed70292de0202604ef1a57dd8b407c15a65c3

    • SSDEEP

      6144:KmVzoIUArpqbnjQu9SLBQGf++y1C7eTXngNx/Ih/KA32cu+jQyCR:KwHvponh9SLBq1Cqbng/ghyAGc3v

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks