Overview

overview

10

Static

static

3

630cd59952...18.exe

windows7-x64

10

630cd59952...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    630cd5995216a80fa7e219c918e73699_JaffaCakes118

  • Size

    392KB

  • Sample

    240722-nljvrawdlp

  • MD5

    630cd5995216a80fa7e219c918e73699

  • SHA1

    9dc2f28229dce87bd85115143e1a9da61638ad04

  • SHA256

    b16f09843e680fdd61fc9e438589b62677dd473c37b1d784a532af3ade3b808c

  • SHA512

    e35aae0f3c54983e2faa8f0606b4663290ab8904d9c8874e5f1cc3722480c183b240f023b850eb006906deed3eac93451299aed3f146670b3880d6885f8b994e

  • SSDEEP

    12288:IDXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:4R9eyWKwkJxruLUb

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      630cd5995216a80fa7e219c918e73699_JaffaCakes118

    • Size

      392KB

    • MD5

      630cd5995216a80fa7e219c918e73699

    • SHA1

      9dc2f28229dce87bd85115143e1a9da61638ad04

    • SHA256

      b16f09843e680fdd61fc9e438589b62677dd473c37b1d784a532af3ade3b808c

    • SHA512

      e35aae0f3c54983e2faa8f0606b4663290ab8904d9c8874e5f1cc3722480c183b240f023b850eb006906deed3eac93451299aed3f146670b3880d6885f8b994e

    • SSDEEP

      12288:IDXUyau9eyDi8Zwb2FJxjTwQN5fg1Eth6XEb:4R9eyWKwkJxruLUb

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks