Overview

overview

10

Static

static

3

63b85e78c4...18.exe

windows7-x64

10

63b85e78c4...18.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63b85e78c43839db533b8323847e81ca_JaffaCakes118

  • Size

    342KB

  • Sample

    240722-ssvcaaveqj

  • MD5

    63b85e78c43839db533b8323847e81ca

  • SHA1

    504a5192c444ca4f2ecc5d6bf98a0e1e777244be

  • SHA256

    3def3bcb827bdf34a3145e55ea994c4999cdf0797216f713f8da821a3ed23a5a

  • SHA512

    d345c845ee71b8a04f375336fbd750741308c32ef0e6c4385a8632e72c48d066920706d77e7ee55cd219e9832566b444f3f09101c24d4252c02bb9348f7e115e

  • SSDEEP

    6144:yNtNYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gvMs4VN:AYvDsakbClM2pxYB3CuM/x2M

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      63b85e78c43839db533b8323847e81ca_JaffaCakes118

    • Size

      342KB

    • MD5

      63b85e78c43839db533b8323847e81ca

    • SHA1

      504a5192c444ca4f2ecc5d6bf98a0e1e777244be

    • SHA256

      3def3bcb827bdf34a3145e55ea994c4999cdf0797216f713f8da821a3ed23a5a

    • SHA512

      d345c845ee71b8a04f375336fbd750741308c32ef0e6c4385a8632e72c48d066920706d77e7ee55cd219e9832566b444f3f09101c24d4252c02bb9348f7e115e

    • SSDEEP

      6144:yNtNYveIk44ai9PakfDYtlUKS2pf/xYLcu5NC9wXMq0jKI/gvMs4VN:AYvDsakbClM2pxYB3CuM/x2M

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks