Overview

overview

10

Static

static

3

66e11a031a...18.exe

windows7-x64

10

66e11a031a...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    66e11a031a6d697ede6b6a29f125696f_JaffaCakes118

  • Size

    400KB

  • Sample

    240723-knas3sxhjq

  • MD5

    66e11a031a6d697ede6b6a29f125696f

  • SHA1

    84f1fbb76862f8cd58152dbe01a6f43cd39b0f58

  • SHA256

    23c5cb69dfbfea38fe5b04048a688d527f7ad888d4ae3af8f41773b9fd042c0b

  • SHA512

    4dc196092942f1acf53a321e7371d6810d3c03e82d90130dfd72f6c054dd6c029bd944e6f9b38e82faae34173533a0afb5cd106313d13c41f4a9eb97308494c4

  • SSDEEP

    6144:VIOSKYfXPPabijWG89H03CcTSMJM75TEb5V/rZMG5TNhzTxmvhNOoxI2:Vaffn0YCTMK7mV/rZMG5xhXgh3P

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      66e11a031a6d697ede6b6a29f125696f_JaffaCakes118

    • Size

      400KB

    • MD5

      66e11a031a6d697ede6b6a29f125696f

    • SHA1

      84f1fbb76862f8cd58152dbe01a6f43cd39b0f58

    • SHA256

      23c5cb69dfbfea38fe5b04048a688d527f7ad888d4ae3af8f41773b9fd042c0b

    • SHA512

      4dc196092942f1acf53a321e7371d6810d3c03e82d90130dfd72f6c054dd6c029bd944e6f9b38e82faae34173533a0afb5cd106313d13c41f4a9eb97308494c4

    • SSDEEP

      6144:VIOSKYfXPPabijWG89H03CcTSMJM75TEb5V/rZMG5TNhzTxmvhNOoxI2:Vaffn0YCTMK7mV/rZMG5xhXgh3P

    Score
    10/10
    evasionpersistencetrojan

    • Windows security bypass

      evasiontrojan

    • Disables taskbar notifications via registry modification

      evasion

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks